Summary
Ein Angreifer kann mehrere Schwachstellen in Fortinet FortiOS, Fortinet FortiManager, Fortinet FortiMail, Fortinet FortiAnalyzer und Fortinet FortiAuthenticator ausnutzen, um beliebigen Programmcode auszuführen, um Sicherheitsmechanismen zu umgehen, seine Berechtigungen zu erweitern, um Daten zu manipulieren und um einen Denial of Service herbezizuführen.
Product
FortiOS ist ein gehärtetes Betriebssystem für FortiGate Plattformen.
FortiManager Security Management Appliances ermöglicht die Verwaltung von Fortinet Network Security Geräten.
FortiMail ist eine Aplliance zum Schutz gegen die von E-Mails übertragenen Bedrohungen.
FortiAnalyzer ist eine Plattform zur Protokollverwaltung, Analyse und Berichterstellung.
FortiAuthenticator erweitert die Fähigkeit zur Multi-Faktor-Authentifizierung auf mehrere FortiGate Appliances und auf Lösungen von Drittanbietern, die RADIUS oder LDAP unterstützen.
Vulnerabilities 30
-
Critical 9.1
A weak password recovery mechanism for forgotten password vulnerability in Fortinet FortiMail 8.0.0, FortiMail 7.6.0 th…
-
Critical 9.1
A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 th…
-
Critical 9.0
A use of hard-coded password vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0…
-
Critical 9.0
A missing authentication for critical function vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.0 through 7.6.7, Fo…
-
High 8.8
A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiA…
-
High 8.7
A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 th…
-
High 8.6
A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 th…
-
High 8.3
A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiA…
-
High 8.2
A improper neutralization of special elements used in an ldap query ('ldap injection') vulnerability in Fortinet FortiA…
-
High 8.2
A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 th…
-
High 8.1
A use of externally-controlled format string vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1 may allow a remote…
-
High 8.1
A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through …
-
High 8.1
A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through …
-
High 8.1
A out-of-bounds write vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 throug…
-
High 8.0
A use of hard-coded credentials vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through …
-
High 7.5
A uncontrolled resource consumption vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.…
-
High 7.5
A loop with unreachable exit condition ('infinite loop') vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0…
-
High 7.5
A stack-based buffer overflow vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.…
-
High 7.5
A allocation of resources without limits or throttling vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3…
-
High 7.5
A null pointer dereference vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 t…
-
High 7.5
A insufficiently protected credentials vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthentic…
-
High 7.4
A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 th…
-
High 7.2
A stack-based buffer overflow vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through …
-
High 7.2
A unintended proxy or intermediary ('confused deputy') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, For…
-
High 7.2
A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer…
-
High 7.2
A unrestricted upload of file with dangerous type vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAna…
-
High 7.2
A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 th…
-
High 7.2
A use of externally-controlled format string vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAut…
-
High 7.2
A improper privilege management vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.…
-
Medium 5.8
A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3,…
Revision history
-
#1
Initiale Fassung
References
-
FortiGuard PSIRT Advisory FG-IR-26-273 vom 2026-11-11
https://fortiguard.fortinet.com/psirt/FG-IR-26-273
-
FortiGuard PSIRT Advisory FG-IR-26-226 vom 2026-11-11
https://fortiguard.fortinet.com/psirt/FG-IR-26-226
-
FortiGuard PSIRT Advisory FG-IR-26-202 vom 2026-11-11
https://fortiguard.fortinet.com/psirt/FG-IR-26-202
-
FortiGuard PSIRT Advisory FG-IR-26-213 vom 2026-11-11
https://fortiguard.fortinet.com/psirt/FG-IR-26-213
-
FortiGuard PSIRT Advisory FG-IR-26-214 vom 2026-11-11
https://fortiguard.fortinet.com/psirt/FG-IR-26-214
-
FortiGuard PSIRT Advisory FG-IR-26-215 vom 2026-11-11
https://fortiguard.fortinet.com/psirt/FG-IR-26-215
-
FortiGuard PSIRT Advisory FG-IR-26-222 vom 2026-11-11
https://fortiguard.fortinet.com/psirt/FG-IR-26-222
-
FortiGuard PSIRT Advisory FG-IR-26-238 vom 2026-11-11
https://fortiguard.fortinet.com/psirt/FG-IR-26-238
-
FortiGuard PSIRT Advisory FG-IR-26-242 vom 2026-11-11
https://fortiguard.fortinet.com/psirt/FG-IR-26-242
-
FortiGuard PSIRT Advisory FG-IR-26-245 vom 2026-11-11
https://fortiguard.fortinet.com/psirt/FG-IR-26-245
-
FortiGuard PSIRT Advisory FG-IR-26-248 vom 2026-11-11
https://fortiguard.fortinet.com/psirt/FG-IR-26-248
-
FortiGuard PSIRT Advisory FG-IR-26-191 vom 2026-11-11
https://fortiguard.fortinet.com/psirt/FG-IR-26-191
-
FortiGuard PSIRT Advisory FG-IR-26-252 vom 2026-11-11
https://fortiguard.fortinet.com/psirt/FG-IR-26-252
-
FortiGuard PSIRT Advisory FG-IR-26-253 vom 2026-11-11
https://fortiguard.fortinet.com/psirt/FG-IR-26-253
-
FortiGuard PSIRT Advisory FG-IR-26-254 vom 2026-11-11
https://fortiguard.fortinet.com/psirt/FG-IR-26-254
-
FortiGuard PSIRT Advisory FG-IR-26-255 vom 2026-11-11
https://fortiguard.fortinet.com/psirt/FG-IR-26-255
-
FortiGuard PSIRT Advisory FG-IR-26-256 vom 2026-11-11
https://fortiguard.fortinet.com/psirt/FG-IR-26-256
-
FortiGuard PSIRT Advisory FG-IR-26-257 vom 2026-11-11
https://fortiguard.fortinet.com/psirt/FG-IR-26-257
-
FortiGuard PSIRT Advisory FG-IR-26-258 vom 2026-11-11
https://fortiguard.fortinet.com/psirt/FG-IR-26-258
-
FortiGuard PSIRT Advisory FG-IR-26-259 vom 2026-11-11
https://fortiguard.fortinet.com/psirt/FG-IR-26-259
-
FortiGuard PSIRT Advisory FG-IR-26-260 vom 2026-11-11
https://fortiguard.fortinet.com/psirt/FG-IR-26-260
-
FortiGuard PSIRT Advisory FG-IR-26-261 vom 2026-11-11
https://fortiguard.fortinet.com/psirt/FG-IR-26-261
-
FortiGuard PSIRT Advisory FG-IR-26-262 vom 2026-11-11
https://fortiguard.fortinet.com/psirt/FG-IR-26-262
-
FortiGuard PSIRT Advisory FG-IR-26-263 vom 2026-11-11
https://fortiguard.fortinet.com/psirt/FG-IR-26-263
-
FortiGuard PSIRT Advisory FG-IR-26-264 vom 2026-11-11
https://fortiguard.fortinet.com/psirt/FG-IR-26-264
-
FortiGuard PSIRT Advisory FG-IR-26-265 vom 2026-11-11
https://fortiguard.fortinet.com/psirt/FG-IR-26-265
-
FortiGuard PSIRT Advisory FG-IR-26-266 vom 2026-11-11
https://fortiguard.fortinet.com/psirt/FG-IR-26-266
-
FortiGuard PSIRT Advisory FG-IR-26-271 vom 2026-11-11
https://fortiguard.fortinet.com/psirt/FG-IR-26-271