Fortinet FortiIsolator
7 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2024-33507 | 2.4.0 – 2.4.4 ; 2.3.0 – 2.3.4 | An insufficient session expiration vulnerability [CWE-613] and an incorrect authorization vulnerability [CWE-863] in FortiIsolator 2.4.0 thr | CRITICAL 9.1 | 0.4 % | ||
| CVE-2024-32124 | 2.4.3 – 2.4.4 ; 2.3.0 – 2.3.4 | An improper access control vulnerability [CWE-284] in FortiIsolator version 2.4.4, version 2.4.3, 2.3 all versions logging component may all | MEDIUM 4.3 | 0.4 % | ||
| CVE-2024-27779 | 2.4.0 – 2.4.4 ; 2.3.0 – 2.3.4 ; 2.2.0 ; … | An insufficient session expiration vulnerability [CWE-613] in FortiSandbox FortiSandbox version 4.4.4 and below, version 4.2.6 and below, 4. | MEDIUM 6.7 | 0.6 % | ||
| CVE-2024-54025 | 2.4.3 – 2.4.6 | An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiIsolat | MEDIUM 6.7 | 0.4 % | ||
| CVE-2024-54024 | 2.4.3 – 2.4.6 | An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiIsolat | HIGH 7.2 | 1.2 % | ||
| CVE-2024-55590 | 2.4.0 – 2.4.5 | Multiple improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet For | HIGH 8.8 | 1.0 % | ||
| CVE-2022-22298 | 2.3.0 – 2.3.3 ; 2.2.0 ; 2.1.0 – 2.1.2 ; … | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiIsolator version 1.0.0, FortiI | HIGH 7.8 | 0.5 % |