Fortinet 脆弱性

タイムライン

タイプ

製品

Fortinet FortiOS173
Fortinet FortiWeb76
Fortinet FortiManager59
Fortinet FortiAnalyzer51
Fortinet FortiProxy48

修復

Official Fix397
Temporary Fix0
Workaround2
Unavailable3
Not Defined318

悪用可能性

High19
Functional0
Proof-of-Concept40
Unproven9
Not Defined652

アクセスベクター

Not Defined0
Physical2
Local116
Adjacent29
Network573

認証

Not Defined0
High83
Low324
None313

ユーザー操作

Not Defined0
Required167
None553

C3BM Index

CVSSv3 Base

≤10
≤20
≤37
≤445
≤5141
≤6159
≤7141
≤8116
≤973
≤1038

CVSSv3 Temp

≤10
≤20
≤38
≤451
≤5151
≤6156
≤7148
≤8100
≤974
≤1032

VulDB

≤10
≤24
≤325
≤4103
≤5163
≤6113
≤7112
≤8108
≤958
≤1034

NVD

≤10
≤20
≤32
≤46
≤523
≤666
≤792
≤881
≤950
≤1042

CNA

≤10
≤20
≤35
≤427
≤562
≤651
≤777
≤888
≤967
≤1030

ベンダー

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤102

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

0dayエクスプロイト

<1k165
<2k334
<5k207
<10k2
<25k0
<50k6
<100k6
≥100k0

本日のエクスプロイト

<1k661
<2k38
<5k14
<10k1
<25k4
<50k2
<100k0
≥100k0

闇ツールの市場規模

🔴 CTI アクティビティ

Affected Products (101): Antivirus (5), Connect (1), FSSO Collector (1), FortiADC (31), FortiADC Manager (1), FortiADCManager (1), FortiAI (1), FortiAP (3), FortiAP-C (2), FortiAP-S (1), FortiAP-S-W2 (1), FortiAP-S W2 (1), FortiAP-U (5), FortiAP-U CLI (1), FortiAP-W2 (2), FortiAnalyzer (51), FortiAnalyzer Appliance (2), FortiAnalyzerVM (1), FortiAuthenticator (15), FortiAuthenticator HA Service (1), FortiAuthenticator OWA Agent for Microsoft OWA (1), FortiBalancer (3), FortiClient (46), FortiClientEMS (9), FortiClient EMS (3), FortiClient Host Security (1), FortiClient Linux SSLVPN (1), FortiClientMac (3), FortiClientMacOS (1), FortiClient Online Installer (1), FortiClientWindows (5), FortiConverter (1), FortiDDoS (1), FortiDDoS-F (2), FortiDDoS API (1), FortiDeceptor (7), FortiEDR (6), FortiEDR CollectorWindows (1), FortiExtender (3), FortiExtender Management Interface (1), FortiGate (8), FortiGuest (1), FortiIsolator (4), FortiMail (28), FortiMail Admin WebUI (2), FortiMail Webmail (1), FortiManager (59), FortiManager GUI (1), FortiManager Management Interface (1), FortiManagerVM (1), FortiManager VM (1), FortiNAC (28), FortiNAC-F (5), FortiNAC Portal UI (1), FortiNDR (1), FortiOS (173), FortiOS SSL-VPN (1), FortiPAM (4), FortiPortal (26), FortiPortal GUI (1), FortiPortal Management Interface (1), FortiPresence (2), FortiPresence Infrastructure Server (1), FortiProxy (48), FortiRecorder (5), FortiSIEM (16), FortiSIEM Windows Agent (3), FortiSOAR (9), FortiSandbox (33), FortiSwitch (5), FortiSwitch FSW (1), FortiSwitchManager (3), FortiTester (13), FortiTokenAndroid (1), FortiToken Mobile (1), FortiTokenWinApp (1), FortiTokeniOS (1), FortiVoice (2), FortiVoiceEnterprise (1), FortiVoiceEntreprise (1), FortiWAN (4), FortiWLC (10), FortiWLC-SD (1), FortiWLM (22), FortiWan (10), FortiWeb (76), FortiWebManager (2), FortiWeb webUI Certificate View Page (1), Fortiadc-400e (1), Fortigate FortiDB (1), Fortiguard Antivirus (1), Fortimail (1), Fortinet28 (1), Fortinet Antivirus (1), Fortinet firewall (1), FotiOS (2), IPS Engine (1), Internet Key Exchange (1), Manager (1), Meru AP (1), Single Sign On (1)

Link to Vendor Website: https://www.fortinet.com/

公開済みBaseTemp脆弱性Prod修復EPSSCTICVE
2024年04月10日8.07.8Fortinet FortiClientMac Configuration File tmp 特権昇格未知Not DefinedOfficial Fix0.000430.04CVE-2024-31492
2024年04月09日6.76.5Fortinet FortiManager Template Local Privilege Escalation未知Not DefinedOfficial Fix0.000430.04CVE-2023-47542
2024年04月09日6.76.5Fortinet FortiOS CLI Format StringFirewall SoftwareNot DefinedOfficial Fix0.000430.04CVE-2023-48784
2024年04月09日8.88.6Fortinet FortiSandbox Requests 特権昇格未知Not DefinedOfficial Fix0.000430.04CVE-2024-21755
2024年04月09日8.88.6Fortinet FortiSandbox Requests 特権昇格未知Not DefinedOfficial Fix0.000430.05CVE-2024-21756
2024年04月09日6.76.5Fortinet FortiSandbox CLI 特権昇格未知Not DefinedOfficial Fix0.000430.06CVE-2023-47540
2024年04月09日6.76.5Fortinet FortiSandbox CLI ディレクトリトラバーサル未知Not DefinedOfficial Fix0.000440.00CVE-2023-47541
2024年04月09日7.27.0Fortinet FortiSandbox HTTP Request ディレクトリトラバーサル未知Not DefinedOfficial Fix0.000440.07CVE-2024-23671
2024年04月09日9.29.0Fortinet FortiClient 特権昇格未知Not DefinedOfficial Fix0.000430.09CVE-2023-45590
2024年04月09日5.45.3Fortinet FortiSandbox HTTP Request ディレクトリトラバーサル未知Not DefinedOfficial Fix0.000440.00CVE-2024-31487
2024年04月09日5.35.2Fortinet FortiOS/FortiProxy 情報の漏洩Firewall SoftwareNot DefinedOfficial Fix0.000430.03CVE-2023-41677
2024年04月09日5.35.2Fortinet FortiOS HTTP Request 情報の漏洩Firewall SoftwareNot DefinedOfficial Fix0.000430.05CVE-2024-23662
2024年03月12日5.65.6Fortinet FortiOS/FortiProxy 特権昇格Firewall SoftwareNot DefinedOfficial Fix0.000450.04CVE-2024-23112
2024年03月12日4.34.2Fortinet FortiPortal 特権昇格未知Not DefinedOfficial Fix0.000450.06CVE-2024-21761
2024年03月12日7.17.0Fortinet FortiOS FortiAuthenticator HA 弱い認証Firewall SoftwareNot DefinedOfficial Fix0.000500.00CVE-2023-46717
2024年03月12日8.58.4Fortinet FortiClientEMS Packets SQLインジェクション未知Not DefinedOfficial Fix0.562220.09CVE-2023-48788
2024年03月12日8.28.1Fortinet FortiClientEMS Packets 特権昇格未知Not DefinedOfficial Fix0.000910.00CVE-2023-47534
2024年03月12日6.76.5Fortinet FortiManager/FortiAnalyzer/FortiPortal Command Argument Format String未知Not DefinedOfficial Fix0.000430.04CVE-2023-41842
2024年03月12日9.29.1Fortinet FortiManager HTTP Request 特権昇格未知Not DefinedOfficial Fix0.000910.00CVE-2023-36554
2024年03月12日8.17.9Fortinet FortiOS/FortiProxy/FortiSwitchManager/FortiPAM HTTP Request メモリ破損Firewall SoftwareNot DefinedOfficial Fix0.000880.00CVE-2023-42790
2024年03月12日9.89.6Fortinet FortiOS/FortiPAM/FortiProxy HTTP Request メモリ破損Firewall SoftwareNot DefinedOfficial Fix0.000910.00CVE-2023-42789
2024年02月20日9.39.1Fortinet FortiManager/FortiAnalyzer HTTP Request ディレクトリトラバーサル未知Not DefinedOfficial Fix0.000430.04CVE-2023-42791
2024年02月15日5.15.1Fortinet FortiNAC Policy Audit Log クロスサイトスクリプティング未知Not DefinedOfficial Fix0.000460.04CVE-2023-26206
2024年02月15日3.83.8Fortinet FortiManager/FortiAnalyzer HTTP 情報の漏洩未知Not DefinedOfficial Fix0.000450.00CVE-2023-44253
2024年02月15日7.77.6Fortinet FortiClientEMS HTTP 特権昇格未知Not DefinedOfficial Fix0.000500.04CVE-2023-45581

695 非表示のエントリあり

Might our Artificial Intelligence support you?

Check our Alexa App!