Known vulnerabilities in FortiAnalyzer 6.4.0 - page 3

Software: FortiAnalyzer
Version: 6.4.0
Software CPE: cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*
Total vulnerabilities: 73
Public exploits: 5
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting FortiAnalyzer version 6.4.0 FortiAnalyzer 6.4.0 is affected by 73 vulnerabilities: 8 high, 24 medium, 41 low Critical High Medium Low

Vulnerabilities (73)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU74980 - Improper input validation
CVE-2022-42477
CWE-20 Low
No
No
7.0.7, 7.2.2 11.04.2023 SB2023041199
#VU73218 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-25611
CWE-94 Low
No
No
7.0.6, 7.2.2 09.03.2023 SB2023030950
#VU72352 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-30304
CWE-79 High
No
No
6.4.9, 7.0.5, 7.2.2 17.02.2023 SB2023021723
#VU68927 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-39950
CWE-79 Low
No
No
6.4.9, 7.0.5, 7.2.0 02.11.2022 SB2022110230
#VU67047 - Improper Access Control
CVE-2022-38377
CWE-284 Low
No
No
6.4.9, 7.0.4, 7.2.1 06.09.2022 SB2022090664
SB2022090665
#VU64939 - Incorrect Default Permissions
CVE-2022-26118
CWE-276 Low
No
No
6.4.8, 7.0.4 05.07.2022 SB2022070535
#VU64938 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-27483
CWE-78 Medium
No
No
6.4.8, 7.0.4 05.07.2022 SB2022070535
#VU64934 - Memory corruption
CVE-2021-43072
CWE-119 Low
No
No
6.4.8, 7.0.3 05.07.2022 SB2022070525
SB2022070526
SB2022070527
and 1 more
#VU64051 - Improper Certificate Validation
CVE-2022-22305
CWE-295 Medium
No
No
6.4.8, 7.0.3 08.06.2022 SB2022060801
#VU64047 - Improper Authentication
CVE-2020-13927
CWE-287 High
Public exploit available
Exploited
6.4.8, 7.0.3 07.06.2022 SB2020111083
SB2022060724
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778
CWE-835 Medium
Public exploit available
No
- 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more
#VU56194 - Exposure of sensitive information to an unauthorized actor
CVE-2021-35936
CWE-200 Medium
No
No
6.4.8, 7.0.3 31.08.2021 SB2021083110
SB2022060724
#VU52840 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-28359
CWE-79 Low
No
No
6.4.8, 7.0.3 04.05.2021 SB2021050409
SB2022060724
#VU50814 - Improper input validation
CVE-2021-23336
CWE-20 Medium
No
No
6.4.8, 7.0.3 19.02.2021 SB2021021907
SB2021022001
SB2021022706
and 56 more
#VU49123 - Use of Hard-coded Credentials
CVE-2020-17526
CWE-798 High
No
No
6.4.8, 7.0.3 21.12.2020 SB2020122314
SB2022060724
#VU48936 - Server-Side Request Forgery (SSRF)
CVE-2020-17513
CWE-918 Medium
No
No
6.4.8, 7.0.3 11.12.2020 SB2020020715
SB2022060724
#VU48934 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-17515
CWE-79 Medium
No
No
6.4.8, 7.0.3 11.12.2020 SB2020121107
SB2022060724
#VU46772 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-13944
CWE-79 Low
No
No
6.4.8, 7.0.3 17.09.2020 SB2020091702
SB2022060724
#VU31686 - Insecure Default Variable Initialization
CVE-2020-11982
CWE-453 Medium
No
No
6.4.8, 7.0.3 20.07.2020 SB2020072006
SB2022060724
#VU31685 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-11981
CWE-78 Medium
No
No
6.4.8, 7.0.3 20.07.2020 SB2020072006
SB2022060724


Showing elements 41 - 60 out of 73