Known vulnerabilities in FortiSOAR - page 2

Software: FortiSOAR
Software CPE: cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*
Total vulnerabilities: 31
Public exploits: 4
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiSOAR FortiSOAR is affected by 31 known vulnerabilities: 4 critical, 11 medium, 16 low Critical High Medium Low

Vulnerabilities (31)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU73212 - Improper Access Control
CVE-2023-25605
CWE-284 Medium
No
No
7.3.2 09.03.2023 SB2023030936
#VU69937 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-38379
CWE-79 Low
No
No
7.2.1 06.12.2022 SB2022120631
#VU68924 - Missing Authentication for Critical Function
CVE-2022-42473
CWE-306 Low
No
No
7.2.3, 7.3.0 02.11.2022 SB2022110223
#VU67037 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-35847
CWE-94 Medium
No
No
7.2.1 06.09.2022 SB2022090659
#VU67036 - Improper Privilege Management
CVE-2022-30298
CWE-269 Medium
No
No
7.0.3, 7.2.1 06.09.2022 SB2022090658
#VU67035 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-29062
CWE-22 Low
No
No
7.0.3, 7.2.1 06.09.2022 SB2022090658
#VU67034 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-29061
CWE-78 Medium
No
No
7.0.3, 7.2.1 06.09.2022 SB2022090658
#VU62775 - Improper Access Control
CVE-2022-23443
CWE-284 Medium
No
No
7.2.0 03.05.2022 SB2022050321
#VU61756 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-22965
CWE-94 Critical
Available
Exploited
7.2.0 31.03.2022 SB2022033109
SB2022040109
SB2022040110
and 78 more
#VU61754 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-22963
CWE-94 Critical
Available
Exploited
7.2.0 31.03.2022 SB2022033107
SB2022041275
SB2022060214
and 15 more
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228
CWE-94 Critical
Available
Exploited
- 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 338 more


Showing elements 21 - 40 out of 31