Fortinet PSIRT Monthly Advisories — February 2021
Tuesday, 9 February 2021
- Vulnerabilities
- 2
- Critical
- 0
- High
- 0
- Zero-days
- 0
- Public exploit
- 0
Exploited 0
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
None of this release's vulnerabilities is known to be exploited so far.
All vulnerabilities 2
Unscored2 ShowHide
-
Unscored
CVE-2020-6649 An insufficient session expiration vulnerability in FortiNet's FortiIsolator version 2.0.1 and below may allow an attacker to reuse the unexpired admin user se…EPSS 1.5%
-
Unscored
CVE-2021-22122 Scanner template An improper neutralization of input during web page generation in FortiWeb GUI interface 6.3.0 through 6.3.7 and version before 6.2.4 may allow an unauthentica…EPSS 11%