FF
Product
Fortianalyzer Firmware
12
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 7Low 0
Watch
Add Fortianalyzer Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-17541 | 6.1 | Jul 16 | A Cross-site Scripting (XSS) vulnerability in Fortinet FortiManager 6.0.0, 5.6.4 and below versions, FortiAnalyzer 6.0.0, 5.6.4 and below versions allows inject Javascript code… Affected: through 5.6.4; 6.0.0 |
| CVE-2017-3126 | 6.1 | May 27 | An Open Redirect vulnerability in Fortinet FortiAnalyzer 5.4.0 through 5.4.2 and FortiManager 5.4.0 through 5.4.2 allows attacker to execute unauthorized code or commands via the… Affected: 5.4.0; 5.4.1; 5.4.2 |
| CVE-2016-3195 | 6.1 | Aug 19 | Cross-site scripting (XSS) vulnerability in the Web-UI in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiAnalyzer 5.x before 5.0.13 and 5.2.x before 5.2.6… Affected: 5.0.0; 5.0.2; 5.0.3; 5.0.4; 5.0.5; 5.0.6; +12 more |
| CVE-2016-3194 | 6.1 | Aug 19 | Cross-site scripting (XSS) vulnerability in the address added page in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiAnalyzer 5.x before 5.0.13 and 5.2.x… Affected: 5.0.0; 5.0.2; 5.0.3; 5.0.4; 5.0.5; 5.0.6; +12 more |
| CVE-2015-7363 | 5.4 | Oct 7 | Cross-site scripting (XSS) vulnerability in the advanced settings page in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.3, in hardware models with a hard disk, and… Affected: 5.0.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; 5.0.5; +10 more |
| CVE-2016-3193 | 5.4 | Aug 19 | Cross-site scripting (XSS) vulnerability in the appliance web-application in Fortinet FortiManager 5.x before 5.0.12, 5.2.x before 5.2.6, and 5.4.x before 5.4.1 and FortiAnalyzer… Affected: 5.0.0; 5.0.2; 5.0.3; 5.0.4; 5.0.5; 5.0.6; +13 more |
| CVE-2016-3196 | 5.4 | Aug 5 | Cross-site scripting (XSS) vulnerability in Fortinet FortiAnalyzer 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 allows remote… Affected: 5.0.0; 5.0.1; 5.0.4; 5.0.5; 5.0.10; 5.2.0; +5 more |
| CVE-2015-3620 | – | May 12 | Cross-site scripting (XSS) vulnerability in the advanced dataset reports page in Fortinet FortiAnalyzer 5.0.0 through 5.0.10 and 5.2.0 through 5.2.1 and FortiManager 5.0.3 through… Affected: 5.0.0; 5.0.1; 5.0.10; 5.2.0; 5.2.1 |
| CVE-2014-2336 | – | Oct 31 | Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet FortiManager before 5.0.7 and FortiAnalyzer before 5.0.7 allow remote attackers to inject… Affected: through 5.0.6 |
| CVE-2014-2335 | – | Oct 31 | Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet FortiManager before 5.0.7 allow remote attackers to inject arbitrary web script or HTML… Affected: through 5.0.6 |
| CVE-2014-2334 | – | Oct 31 | Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet FortiAnalyzer before 5.0.7 allow remote attackers to inject arbitrary web script or HTML… Affected: through 5.0.6 |
| CVE-2013-6826 | – | Nov 20 | cgi-bin/module//sysmanager/admin/SYSAdminUserDialog in Fortinet FortiAnalyzer before 5.0.5 does not properly validate the csrf_token parameter, which allows remote attackers to… Affected: through 5.0.4 |
Showing 12