Known vulnerabilities in FortiManager - page 6

Software: FortiManager
Software CPE: cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*
Total vulnerabilities: 112
Public exploits: 7
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiManager FortiManager is affected by 112 known vulnerabilities: 2 critical, 13 high, 29 medium, 68 low Critical High Medium Low

Vulnerabilities (112)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU35952 - Cleartext Transmission of Sensitive Information
CVE-2018-1360
CWE-319 High
No
No
- 25.04.2019 SB2019042510
#VU16174 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-13375
CWE-79 Low
No
No
5.6.1 29.11.2018 SB2018111606
#VU13795 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-17541
CWE-79 Low
No
No
5.6.5, 6.0.1 10.07.2018 SB2018071102
#VU13513 - Improper Access Control
CVE-2018-1354
CWE-284 Low
No
No
6.0.1 28.06.2018 SB2018062912
#VU13503 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1351
CWE-79 Low
No
No
6.0.1 27.06.2018 SB2018062709
#VU13525 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2018-1355
CWE-601 Low
No
No
6.0.1 26.06.2018 SB2018062912
#VU6779 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2017-3126
CWE-601 Low
No
No
- 26.05.2017 SB2017052605
#VU5828 - Exposure of sensitive information to an unauthorized actor
CVE-2016-8495
CWE-200 Low
No
No
- 09.02.2017 SB2017021502
#VU789 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-7363
CWE-79 Low
No
No
- 05.10.2016 SB2016100532
#VU304 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-3193
CWE-79 Medium
No
No
- 12.08.2016 SB2016081201
#VU303 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-3194
CWE-79 Low
No
No
- 12.08.2016 SB2016081201
#VU302 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-3195
CWE-79 Low
No
No
- 12.08.2016 SB2016081201


Showing elements 101 - 120 out of 112