Known vulnerabilities in FortiManager - page 4

Software: FortiManager
Software CPE: cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*
Total vulnerabilities: 112
Public exploits: 7
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiManager FortiManager is affected by 112 known vulnerabilities: 2 critical, 13 high, 29 medium, 68 low Critical High Medium Low

Vulnerabilities (112)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU84860 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-25606
CWE-22 Medium
No
No
6.4.12, 7.0.7, 7.2.2 29.12.2023 SB2023122909
#VU83277 - Use of Hard-coded Credentials
CVE-2023-40719
CWE-798 Low
No
No
7.2.4, 7.4.1 20.11.2023 SB2023112018
#VU81963 - Server-Side Request Forgery (SSRF)
CVE-2023-44256
CWE-918 Medium
No
No
7.0.9, 7.2.4, 7.4.1 12.10.2023 SB2023101257
#VU81962 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-25607
CWE-78 Low
No
No
6.4.12, 7.0.8, 7.2.3, 7.4.0 12.10.2023 SB2023101254
#VU81961 - Improper Access Control
CVE-2023-41679
CWE-284 Medium
No
No
6.4.12, 7.0.8, 7.2.3, 7.4.0 12.10.2023 SB2023101255
#VU81960 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-42788
CWE-78 Low
No
No
6.2.12, 6.4.13, 7.0.9, 7.2.4, 7.4.1 12.10.2023 SB2023101257
#VU81959 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-41838
CWE-22 Low
No
No
6.2.12, 6.4.13, 7.0.9, 7.2.4, 7.4.1 12.10.2023 SB2023101257
#VU81958 - Client-Side Enforcement of Server-Side Security
CVE-2023-42787
CWE-602 Medium
No
No
7.2.4, 7.4.1 12.10.2023 SB2023101256
#VU81957 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-42791
CWE-22 Medium
Available
No
6.2.12, 6.4.13, 7.0.9, 7.2.4, 7.4.1 12.10.2023 SB2023101257
#VU81956 - Authorization Bypass Through User-Controlled Key
CVE-2023-44249
CWE-639 Low
No
No
7.2.4, 7.4.1 12.10.2023 SB2023101256
#VU80900 - Improper Privilege Management
CVE-2023-36638
CWE-269 Low
No
No
6.4.12, 7.0.8, 7.2.3 19.09.2023 SB2023091976
#VU77195 - Server-Side Request Forgery (SSRF)
CVE-2023-25609
CWE-918 Medium
No
No
6.4.12, 7.0.7, 7.2.2 13.06.2023 SB2023061325
#VU75021 - Exposure of sensitive information to an unauthorized actor
CVE-2022-27490
CWE-200 Medium
No
No
6.0.5 12.04.2023 SB2023041219
#VU75010 - Improper Certificate Validation
CVE-2023-22642
CWE-295 Medium
No
No
6.4.11, 7.0.6, 7.2.2 12.04.2023 SB2023041209
#VU70662 - Incorrect User Management
CVE-2022-45857
CWE-286 Medium
No
No
6.2.9, 6.4.8, 7.0.2 03.01.2023 SB2023010325
#VU68927 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-39950
CWE-79 Low
No
No
6.4.9, 7.0.5, 7.2.0 02.11.2022 SB2022110230
#VU68101 - Exposure of resource to wrong sphere
CVE-2022-26121
CWE-668 Low
No
No
7.0.4 10.10.2022 SB2022101026
#VU67047 - Improper Access Control
CVE-2022-38377
CWE-284 Low
No
No
6.4.8, 7.0.4, 7.2.1 06.09.2022 SB2022090664
SB2022090665
#VU64939 - Incorrect Default Permissions
CVE-2022-26118
CWE-276 Low
No
No
6.4.8, 7.0.4 05.07.2022 SB2022070535
#VU64938 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-27483
CWE-78 Medium
No
No
6.4.8, 7.0.4 05.07.2022 SB2022070535


Showing elements 61 - 80 out of 112