Fortinet الثغرات

التسلسل الزمني

النوع

منتج

Fortinet FortiOS173
Fortinet FortiWeb76
Fortinet FortiManager59
Fortinet FortiAnalyzer51
Fortinet FortiProxy48

معالجة

Official Fix397
Temporary Fix0
Workaround2
Unavailable3
Not Defined318

قابلية الاستغلال

High25
Functional0
Proof-of-Concept38
Unproven9
Not Defined648

متجه الوصول

Not Defined0
Physical2
Local116
Adjacent29
Network573

توثيق

Not Defined0
High83
Low324
None313

تفاعل المستخدم

Not Defined0
Required167
None553

C3BM Index

CVSSv3 Base

≤10
≤20
≤37
≤445
≤5141
≤6159
≤7141
≤8116
≤973
≤1038

CVSSv3 Temp

≤10
≤20
≤38
≤451
≤5151
≤6156
≤7148
≤8100
≤974
≤1032

VulDB

≤10
≤24
≤325
≤4103
≤5163
≤6113
≤7112
≤8108
≤958
≤1034

NVD

≤10
≤20
≤32
≤46
≤523
≤666
≤792
≤881
≤950
≤1042

CNA

≤10
≤20
≤35
≤427
≤562
≤651
≤777
≤888
≤967
≤1030

المجهز

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤102

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

إكسبلويت ذات هجوم فوري

<1k165
<2k334
<5k207
<10k2
<25k0
<50k6
<100k6
≥100k0

إكسبلويت اليوم

<1k669
<2k35
<5k8
<10k2
<25k3
<50k3
<100k0
≥100k0

حجم سوق الإكسبلويت

🔴 CTI النشاطات

Affected Products (101): Antivirus (5), Connect (1), FSSO Collector (1), FortiADC (31), FortiADC Manager (1), FortiADCManager (1), FortiAI (1), FortiAP (3), FortiAP-C (2), FortiAP-S (1), FortiAP-S-W2 (1), FortiAP-S W2 (1), FortiAP-U (5), FortiAP-U CLI (1), FortiAP-W2 (2), FortiAnalyzer (51), FortiAnalyzer Appliance (2), FortiAnalyzerVM (1), FortiAuthenticator (15), FortiAuthenticator HA Service (1), FortiAuthenticator OWA Agent for Microsoft OWA (1), FortiBalancer (3), FortiClient (46), FortiClientEMS (9), FortiClient EMS (3), FortiClient Host Security (1), FortiClient Linux SSLVPN (1), FortiClientMac (3), FortiClientMacOS (1), FortiClient Online Installer (1), FortiClientWindows (5), FortiConverter (1), FortiDDoS (1), FortiDDoS-F (2), FortiDDoS API (1), FortiDeceptor (7), FortiEDR (6), FortiEDR CollectorWindows (1), FortiExtender (3), FortiExtender Management Interface (1), FortiGate (8), FortiGuest (1), FortiIsolator (4), FortiMail (28), FortiMail Admin WebUI (2), FortiMail Webmail (1), FortiManager (59), FortiManager GUI (1), FortiManager Management Interface (1), FortiManagerVM (1), FortiManager VM (1), FortiNAC (28), FortiNAC-F (5), FortiNAC Portal UI (1), FortiNDR (1), FortiOS (173), FortiOS SSL-VPN (1), FortiPAM (4), FortiPortal (26), FortiPortal GUI (1), FortiPortal Management Interface (1), FortiPresence (2), FortiPresence Infrastructure Server (1), FortiProxy (48), FortiRecorder (5), FortiSIEM (16), FortiSIEM Windows Agent (3), FortiSOAR (9), FortiSandbox (33), FortiSwitch (5), FortiSwitch FSW (1), FortiSwitchManager (3), FortiTester (13), FortiTokenAndroid (1), FortiToken Mobile (1), FortiTokenWinApp (1), FortiTokeniOS (1), FortiVoice (2), FortiVoiceEnterprise (1), FortiVoiceEntreprise (1), FortiWAN (4), FortiWLC (10), FortiWLC-SD (1), FortiWLM (22), FortiWan (10), FortiWeb (76), FortiWebManager (2), FortiWeb webUI Certificate View Page (1), Fortiadc-400e (1), Fortigate FortiDB (1), Fortiguard Antivirus (1), Fortimail (1), Fortinet28 (1), Fortinet Antivirus (1), Fortinet firewall (1), FotiOS (2), IPS Engine (1), Internet Key Exchange (1), Manager (1), Meru AP (1), Single Sign On (1)

Link to Vendor Website: https://www.fortinet.com/

منشورBaseTempالثغرةProdق�معالجةEPSSCTICVE
10/04/20248.07.8Fortinet FortiClientMac Configuration File tmp تجاوز الصلاحياتغير معروفNot DefinedOfficial Fix0.000430.00CVE-2024-31492
09/04/20246.76.5Fortinet FortiManager Template Local Privilege Escalationغير معروفNot DefinedOfficial Fix0.000430.04CVE-2023-47542
09/04/20246.76.5Fortinet FortiOS CLI Format StringFirewall SoftwareNot DefinedOfficial Fix0.000430.00CVE-2023-48784
09/04/20248.88.6Fortinet FortiSandbox Requests تجاوز الصلاحياتغير معروفNot DefinedOfficial Fix0.000430.04CVE-2024-21755
09/04/20248.88.6Fortinet FortiSandbox Requests تجاوز الصلاحياتغير معروفNot DefinedOfficial Fix0.000430.05CVE-2024-21756
09/04/20246.76.5Fortinet FortiSandbox CLI تجاوز الصلاحياتغير معروفNot DefinedOfficial Fix0.000430.05CVE-2023-47540
09/04/20246.76.5Fortinet FortiSandbox CLI اجتياز الدليلغير معروفNot DefinedOfficial Fix0.000440.00CVE-2023-47541
09/04/20247.27.0Fortinet FortiSandbox HTTP Request اجتياز الدليلغير معروفNot DefinedOfficial Fix0.000440.07CVE-2024-23671
09/04/20249.29.0Fortinet FortiClient تجاوز الصلاحياتغير معروفNot DefinedOfficial Fix0.000430.04CVE-2023-45590
09/04/20245.45.3Fortinet FortiSandbox HTTP Request اجتياز الدليلغير معروفNot DefinedOfficial Fix0.000440.00CVE-2024-31487
09/04/20245.35.2Fortinet FortiOS/FortiProxy الكشف عن المعلوماتFirewall SoftwareNot DefinedOfficial Fix0.000430.21CVE-2023-41677
09/04/20245.35.2Fortinet FortiOS HTTP Request الكشف عن المعلوماتFirewall SoftwareNot DefinedOfficial Fix0.000430.17CVE-2024-23662
12/03/20245.65.6Fortinet FortiOS/FortiProxy تجاوز الصلاحياتFirewall SoftwareNot DefinedOfficial Fix0.000450.04CVE-2024-23112
12/03/20244.34.2Fortinet FortiPortal تجاوز الصلاحياتغير معروفNot DefinedOfficial Fix0.000450.06CVE-2024-21761
12/03/20247.17.0Fortinet FortiOS FortiAuthenticator HA توثيق ضعيفFirewall SoftwareNot DefinedOfficial Fix0.000500.04CVE-2023-46717
12/03/20248.58.4Fortinet FortiClientEMS Packets حقن إس كيو إلغير معروفHighOfficial Fix0.562220.04CVE-2023-48788
12/03/20248.28.1Fortinet FortiClientEMS Packets تجاوز الصلاحياتغير معروفNot DefinedOfficial Fix0.000910.06CVE-2023-47534
12/03/20246.76.5Fortinet FortiManager/FortiAnalyzer/FortiPortal Command Argument Format Stringغير معروفNot DefinedOfficial Fix0.000430.04CVE-2023-41842
12/03/20249.29.1Fortinet FortiManager HTTP Request تجاوز الصلاحياتغير معروفNot DefinedOfficial Fix0.000910.00CVE-2023-36554
12/03/20248.17.9Fortinet FortiOS/FortiProxy/FortiSwitchManager/FortiPAM HTTP Request تلف الذاكرةFirewall SoftwareNot DefinedOfficial Fix0.000880.00CVE-2023-42790
12/03/20249.89.6Fortinet FortiOS/FortiPAM/FortiProxy HTTP Request تلف الذاكرةFirewall SoftwareNot DefinedOfficial Fix0.000910.03CVE-2023-42789
20/02/20249.39.1Fortinet FortiManager/FortiAnalyzer HTTP Request اجتياز الدليلغير معروفNot DefinedOfficial Fix0.000430.05CVE-2023-42791
15/02/20245.15.1Fortinet FortiNAC Policy Audit Log سكربتات مشتركةغير معروفNot DefinedOfficial Fix0.000460.04CVE-2023-26206
15/02/20243.83.8Fortinet FortiManager/FortiAnalyzer HTTP الكشف عن المعلوماتغير معروفNot DefinedOfficial Fix0.000450.00CVE-2023-44253
15/02/20247.77.6Fortinet FortiClientEMS HTTP تجاوز الصلاحياتغير معروفNot DefinedOfficial Fix0.000500.04CVE-2023-45581

695 بعض الادخالات لم يتم عرضها

Do you know our Splunk app?

Download it now for free!