Fortinet FortiAuthenticator
11 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-53379 | 6.6.0 – 6.6.2 ; 6.5.0 – 6.5.7 ; 6.4.0 – 6.4.11 ; … | A out-of-bounds read vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.2, FortiAuthenticator 6.5 all versions may allow a remot | HIGH 7.5 | 0.5 % | ||
| CVE-2026-44277 | 8.0.2 ; 8.0.0 ; 6.6.0 – 6.6.8 ; … | A improper access control vulnerability in Fortinet FortiAuthenticator 8.0.2, FortiAuthenticator 8.0.0, FortiAuthenticator 6.6.0 through 6.6 | CRITICAL 9.8 | 0.6 % | ||
| CVE-2026-21743 | 6.6.0 – 6.6.6 ; 6.5.0 – 6.5.7 ; 6.4.0 – 6.4.11 ; … | A missing authorization vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all versions, FortiAuthenti | HIGH 7.2 | 0.4 % | ||
| CVE-2025-59923 | 6.6.0 – 6.6.6 ; 6.5.0 – 6.5.6 ; 6.4.0 – 6.4.10 | An improper access control vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all versions, FortiAuthe | LOW 2.7 | 0.2 % | ||
| CVE-2025-57823 | 6.6.0 – 6.6.6 ; 6.5.0 – 6.5.6 ; 6.4.0 – 6.4.10 ; … | A direct request ('forced browsing') vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all versions, | LOW 2.7 | 0.2 % | ||
| CVE-2022-23439 | | A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafte | MEDIUM 6.1 | 0.5 % | ||
| CVE-2024-23664 | 6.6.0 ; 6.5.0 – 6.5.3 ; 6.4.0 – 6.4.9 | A URL redirection to untrusted site ('open redirect') in Fortinet FortiAuthenticator version 6.6.0, version 6.5.3 and below, version 6.4.9 a | MEDIUM 6.1 | 0.3 % | ||
| CVE-2022-22302 | 6.1.0 ; 6.0.0 – 6.0.4 ; 5.5.0 | A clear text storage of sensitive information (CWE-312) vulnerability in both FortiGate version 6.4.0 through 6.4.1, 6.2.0 through 6.2.9 and | MEDIUM 5.3 | 0.3 % | ||
| CVE-2022-35850 | 6.4.0 – 6.4.4 ; 6.3.0 – 6.3.3 ; 6.2.0 – 6.2.2 ; … | An improper neutralization of script-related HTML tags in a web page vulnerability [CWE-80] in FortiAuthenticator versions 6.4.0 through 6.4 | MEDIUM 6.1 | 0.5 % | ||
| CVE-2023-26208 | 6.4.0 – 6.4.6 ; 6.3.0 – 6.3.3 ; 6.2.0 – 6.2.1 ; … | A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiAuthenticator 6.4.x and before allows | MEDIUM 5.3 | 1.8 % | ||
| CVE-2021-24005 | FortiAuthenticator versions before 6.3.0. | Usage of hard-coded cryptographic keys to encrypt configuration files and debug logs in FortiAuthenticator versions before 6.3.0 may allow a | HIGH 7.5 | 0.6 % |