FO
Product
FortiWAN
16
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 7Medium 6Low 0
Watch
Add FortiWAN to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-44252 | 8.8 | Dec 13 | ** UNSUPPORTED WHEN ASSIGNED **An improper authentication vulnerability [CWE-287] in Fortinet FortiWAN version 5.2.0 through 5.2.1 and version 5.1.1 through 5.1.2 may allow an… Affected: 5.1.1; 5.1.2; 5.2.0; 5.2.1 |
| CVE-2023-44251 | 8.8 | Dec 13 | ** UNSUPPORTED WHEN ASSIGNED **A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability [CWE-22] in Fortinet FortiWAN version 5.2.0 through… Affected: 5.1.1; 5.1.2; 5.2.0; 5.2.1 |
| CVE-2022-33869 | 8.8 | Feb 16 | An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface of FortiWAN 4.0.0 through 4.5.9 may allow an authenticated… Affected: 4.0.0 through 4.0.6; 4.5.0 before 4.5.10; 4.1.1; 4.1.2; 4.1.3; 4.2.1; +8 more |
| CVE-2021-24009 | 8.8 | Apr 6 | Multiple improper neutralization of special elements used in an OS command vulnerabilities (CWE-78) in the Web GUI of FortiWAN before 4.5.9 may allow an authenticated attacker to… Affected: through 4.5.8 |
| CVE-2016-4965 | 8.8 | Sep 21 | Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users with access to the nslookup functionality to execute arbitrary commands with root privileges… Affected: through 4.2.4 |
| CVE-2021-26115 | 7.8 | Dec 19 | An OS command injection (CWE-78) vulnerability in FortiWAN version 4.5.7 and below Command Line Interface may allow a local, authenticated and unprivileged attacker to escalate… Affected: 4.5.0 through 4.5.7; 4.4.0 through 4.4.1; 4.3.0 through 4.3.1; 4.2.5 through 4.2.7; 4.2.1 through 4.2.2; 4.1.1 through 4.1.3; +1 more |
| CVE-2021-26113 | 7.5 | Apr 6 | A use of a one-way hash with a predictable salt vulnerability [CWE-760] in FortiWAN before 4.5.9 may allow an attacker who has previously come in possession of the password file… Affected: before 4.5.9 |
Showing 7