FO
Product
FortiAnalyzer
On CISA KEVExploited in the wild
98
CVEs
1
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 6High 32Medium 53Low 7
Watch
Add FortiAnalyzer to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-32598 | 4.3 | Aug 5 | An improper neutralization of CRLF sequences in HTTP headers ('HTTP Response Splitting') vulnerability In FortiManager and FortiAnalyzer GUI 7.0.0, 6.4.6 and below, 6.2.8 and… Affected: 5.6.0 before 7.0.1 |
| CVE-2022-22305 | 4.2 | Sep 1 | An improper certificate validation vulnerability [CWE-295] in FortiManager 7.0.1 and below, 6.4.6 and below; FortiAnalyzer 7.0.2 and below, 6.4.7 and below; FortiOS 6.2.x and… Affected: 6.0.0 through 6.0.12; 6.2.9 through 6.4.7; 7.0.0; 7.0.1; 7.0.2 |
| CVE-2023-44255 | 4.1 | Nov 12 | An exposure of sensitive information to an unauthorized actor [CWE-200] in Fortinet FortiManager before 7.4.2, FortiAnalyzer before 7.4.2 and FortiAnalyzer-BigData before 7.2.5… Affected: 7.4.0 through 7.4.2; 7.2.0 through 7.2.3; 7.0.0 through 7.0.13; 6.4.0 through 6.4.15; 6.2.0 through 6.2.13 |