FO
Product
FortiWAN
16
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 7Medium 6Low 0
Watch
Add FortiWAN to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-32593 | 6.5 | Apr 6 | A use of a broken or risky cryptographic algorithm vulnerability [CWE-327] in the Dynamic Tunnel Protocol of FortiWAN before 4.5.9 may allow an unauthenticated remote attacker to… Affected: through 4.5.8 |
| CVE-2016-4968 | 6.5 | Sep 21 | The linkreport/tmp/admin_global page in Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users to discover administrator cookies via a GET request Affected: through 4.2.4 |
| CVE-2016-4967 | 6.5 | Sep 21 | Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users to obtain sensitive information from (1) a backup of the device configuration via… Affected: through 4.2.4 |
| CVE-2016-4966 | 6.5 | Sep 21 | The diagnosis_control.php page in Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users to download PCAP files via vectors related to the UserName… Affected: through 4.2.4 |
| CVE-2021-32585 | 6.1 | Apr 6 | An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiWAN before 4.5.9 may allow an attacker to perform a stored cross-site scripting… Affected: before 4.5.9 |
| CVE-2016-4969 | 6.1 | Sep 21 | Cross-site scripting (XSS) vulnerability in Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote attackers to inject arbitrary web script or HTML via the IP… Affected: through 4.2.4 |
Showing 6