Fortinet PSIRT Monthly Advisories — May 2024
Tuesday, 14 May 2024
- Vulnerabilities
- 11
- Critical
- 0
- High
- 2
- Zero-days
- 0
- Public exploit
- 0
Exploited 0
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
None of this release's vulnerabilities is known to be exploited so far.
All vulnerabilities 11
High2 ShowHide
- High 8.6
- High 7.1
Medium9 ShowHide
-
Medium 6.8
CVE-2023-46714 A stack-based buffer overflow [CWE-121] vulnerability in Fortinet FortiOS version 7.2.1 through 7.2.6 and version 7.4.0 through 7.4.1 allows a privileged attac…EPSS 1.4%
- Medium 6.7
-
Medium 6.5
CVE-2023-44247 A double free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 6.4 all versions may allow a privileged attacker to execute code or commands via crafte…EPSS 1.3%
- Medium 6.2
- Medium 6.2
-
Medium 6.1
CVE-2024-31488 An improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC version 9.4.0 through 9.4.4, 9.2.0 through 9.2.8, 9.1.0 thro…EPSS 1%
- Medium 5.2
-
Medium 5.0
CVE-2024-26007 An improper check or handling of exceptional conditions vulnerability [CWE-703] in Fortinet FortiOS version 7.4.1 allows an unauthenticated attacker to provoke…EPSS 1.2%
- Medium 4.7