Fortinet Fortinet FortiManager
7 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-22303 | FortiManager 7.0.2, 7.0.1, 7.0.0, 6.4.7, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.9, 6.2.8, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0 | An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiManager versions prior to 7.0. | MEDIUM 5.5 | 0.2 % | ||
| CVE-2021-36192 | FortiManager 7.0.1 and below, 6.4.6 and below, 6.2.x, 6.0.x, 5.6.0 | An exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in FortiManager 7.0.1 and below, 6.4.6 and below, 6.2. | MEDIUM 5.2 | 0.2 % | ||
| CVE-2021-26107 | FortiManager 6.4.5, 6.4.4 | An improper access control vulnerability [CWE-284] in FortiManager versions 6.4.4 and 6.4.5 may allow an authenticated attacker with a restr | MEDIUM 6.3 | 0.5 % | ||
| CVE-2021-24017 | FortiManager 6.4.3, 6.2.6 | An improper authentication in Fortinet FortiManager version 6.4.3 and below, 6.2.6 and below allows attacker to assign arbitrary Policy and | MEDIUM 5.4 | 0.6 % | ||
| CVE-2021-24016 | FortiManager 6.4.3, 6.2.7 | An improper neutralization of formula elements in a csv file in Fortinet FortiManager version 6.4.3 and below, 6.2.7 and below allows attack | MEDIUM 6.3 | 0.5 % | ||
| CVE-2021-24006 | FortiManager 6.4.0 to 6.4.3 | An improper access control vulnerability in FortiManager versions 6.4.0 to 6.4.3 may allow an authenticated attacker with a restricted user | HIGH 8.8 | 1.0 % | ||
| CVE-2019-17654 | 6.2.1 ; 6.2.0 ; 6.0.6 and below | An Insufficient Verification of Data Authenticity vulnerability in FortiManager 6.2.1, 6.2.0, 6.0.6 and below may allow an unauthenticated a | HIGH 8.8 | 0.5 % |