Known vulnerabilities in FortiEDR
Vendor:
Fortinet, Inc
Software:
FortiEDR
Software CPE:
cpe:2.3:a:fortinet:fortiedr:*:*:*:*:*:*:*:*
Website:
https://www.fortinet.com/
Total vulnerabilities:
5
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU81951 - Insufficient Session Expiration CVE-2023-33303 |
CWE-613 | High | 5.0.3.873, 5.2.0.2501 | 12.10.2023 |
SB2023101247 |
||
| #VU64932 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-29057 |
CWE-79 | Low | 5.2.0 | 05.07.2022 |
SB2022070519 |
||
| #VU61898 - Use of Hard-coded Cryptographic Key CVE-2022-23440 |
CWE-321 | Low | 5.0.3 | 05.04.2022 |
SB2022040528 |
||
| #VU61897 - Use of Hard-coded Cryptographic Key CVE-2022-23441 |
CWE-321 | Medium | 5.0.3 | 05.04.2022 |
SB2022040528 |
||
| #VU61896 - Improper control of a resource through its lifetime CVE-2022-23446 |
CWE-664 | Low | - | 05.04.2022 |
SB2022040528 |