Known Vulnerabilities for Fortimanager Firmware by Fortinet
Listed below are 10 of the newest known vulnerabilities associated with "Fortimanager Firmware" by "Fortinet".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2017-17541 | A Cross-site Scripting (XSS) vulnerability in Fortinet FortiManager 6.0.0, 5.6.4 and below versions, FortiAnalyzer 6.0.0, 5.6... | 6.1 - MEDIUM | 2018-07-16 | 2018-09-12 |
| CVE-2017-3126 | An Open Redirect vulnerability in Fortinet FortiAnalyzer 5.4.0 through 5.4.2 and FortiManager 5.4.0 through 5.4.2 allows atta... | 6.1 - MEDIUM | 2017-05-27 | 2017-07-08 |
| CVE-2016-8495 | An improper certificate validation vulnerability in Fortinet FortiManager 5.0.6 through 5.2.7 and 5.4.0 through 5.4.1 allows ... | 7.4 - HIGH | 2017-02-13 | 2017-07-25 |
| CVE-2016-3196 | Cross-site scripting (XSS) vulnerability in Fortinet FortiAnalyzer 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiManager ... | 5.4 - MEDIUM | 2016-08-05 | 2018-10-09 |
| CVE-2016-3195 | Cross-site scripting (XSS) vulnerability in the Web-UI in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 and ... | 6.1 - MEDIUM | 2016-08-19 | 2017-08-16 |
| CVE-2016-3194 | Cross-site scripting (XSS) vulnerability in the address added page in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x befor... | 6.1 - MEDIUM | 2016-08-19 | 2017-08-16 |
| CVE-2016-3193 | Cross-site scripting (XSS) vulnerability in the appliance web-application in Fortinet FortiManager 5.x before 5.0.12, 5.2.x b... | 5.4 - MEDIUM | 2016-08-19 | 2017-08-16 |
| CVE-2015-3616 | SQL injection vulnerability in Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote attackers to execu... | 9.8 - CRITICAL | 2017-08-11 | 2017-08-26 |
| CVE-2015-3615 | Cross-site scripting (XSS) vulnerability in Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote authe... | 5.4 - MEDIUM | 2017-08-11 | 2017-08-26 |
| CVE-2015-3614 | Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote attackers to obtain arbitrary files via vectors i... | 7.5 - HIGH | 2017-08-11 | 2017-08-26 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Fortinet | Fortimanager Firmware | 5.2.1 | All | All | All |
| Operating System | Fortinet | Fortimanager Firmware | 5.2.0 | All | All | All |
| Operating System | Fortinet | Fortimanager Firmware | 5.0.9 | All | All | All |
| Operating System | Fortinet | Fortimanager Firmware | 5.0.8 | All | All | All |
| Operating System | Fortinet | Fortimanager Firmware | 5.0.7 | All | All | All |
| Operating System | Fortinet | Fortimanager Firmware | 5.0.6 | All | All | All |
| Operating System | Fortinet | Fortimanager Firmware | 5.0.5 | All | All | All |
| Operating System | Fortinet | Fortimanager Firmware | 5.0.4 | All | All | All |
| Operating System | Fortinet | Fortimanager Firmware | 5.0.3 | All | All | All |
| Operating System | Fortinet | Fortimanager Firmware | 5.0.10 | All | All | All |