Known vulnerabilities in FortiAnalyzer - page 6

Software: FortiAnalyzer
Software CPE: cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*
Total vulnerabilities: 110
Public exploits: 7
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiAnalyzer FortiAnalyzer is affected by 110 known vulnerabilities: 1 critical, 10 high, 35 medium, 64 low Critical High Medium Low

Vulnerabilities (110)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU29202 - Insufficient Control of Network Message Volume (Network Amplification)
CWE-406 Medium
No
No
6.2.4, 6.4.1 23.06.2020 SB2020062309
#VU28749 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-6640
CWE-79 Low
No
No
6.2.4, 6.4.0 05.06.2020 SB2020060504
#VU16174 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-13375
CWE-79 Low
No
No
5.6.1 29.11.2018 SB2018111606
#VU13795 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-17541
CWE-79 Low
No
No
5.6.5, 6.0.1 10.07.2018 SB2018071102
#VU13513 - Improper Access Control
CVE-2018-1354
CWE-284 Low
No
No
6.0.1 28.06.2018 SB2018062912
#VU13525 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2018-1355
CWE-601 Low
No
No
6.0.1 26.06.2018 SB2018062912
#VU6779 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2017-3126
CWE-601 Low
No
No
- 26.05.2017 SB2017052605
#VU304 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-3193
CWE-79 Medium
No
No
- 12.08.2016 SB2016081201
#VU303 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-3194
CWE-79 Low
No
No
- 12.08.2016 SB2016081201
#VU302 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-3195
CWE-79 Low
No
No
- 12.08.2016 SB2016081201


Showing elements 101 - 120 out of 110