Fortinet FortiDDoS
6 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2021-24008 | 5.4.0 ; 5.3.0 – 5.3.2 ; 5.2.0 ; … | An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiDDoS version 5.4.0, version 5. | MEDIUM 5.3 | 0.5 % | ||
| CVE-2022-23439 | | A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafte | MEDIUM 6.1 | 0.5 % | ||
| CVE-2022-27486 | 5.7.0 ; 5.5.0 – 5.5.1 ; 5.4.0 – 5.4.2 ; … | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiDDoS version 5.5.0 through 5.5 | HIGH 7.8 | 0.8 % | ||
| CVE-2022-40679 | 5.6.0 – 5.6.1 ; 5.5.0 – 5.5.1 ; 5.4.0 – 5.4.2 ; … | An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in FortiADC 5.x all versions, 6.0 all versions, | HIGH 7.8 | 0.2 % | ||
| CVE-2021-36193 | 5.7.0 ; 5.6.0 – 5.6.1 ; 5.5.0 – 5.5.1 ; … | Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an authenticated attacker to achiev | HIGH 7.2 | 0.8 % | ||
| CVE-2021-42757 | | A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authenticated l | MEDIUM 6.7 | 0.5 % |