An improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC version 9.4.0 through 9.4.4, 9.2.0 through 9.2.8, 9.1.0 through 9.1.10, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 7.2.0 through 7.2.3 may allow a remote authenticated attacker to perform stored and reflected cross site scripting (XSS) attack via crafted HTTP requests.
A client-side enforcement of server-side security vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.4, FortiSandbox 4.2.1 through 4.2.6 allows attacker to execute unauthorized code or commands via HTTP requests.
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.3, FortiSandbox 4.2.1 through 4.2.6, FortiSandbox 4.0.0 through 4.0.4 allows attacker to execute unauthorized code or commands via crafted requests..
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.3, FortiSandbox 4.2.1 through 4.2.6, FortiSandbox 4.0.0 through 4.0.4 allows attacker to execute unauthorized code or commands via crafted requests..
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.4, FortiSandbox 4.2.1 through 4.2.6, FortiSandbox 4.0 all versions, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions, FortiSandbox 3.0 all versions, FortiSandbox 2.5 all versions, FortiSandbox 2.4 all versions allows attacker to information disclosure via crafted http requests.
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.3, FortiSandbox 4.2.1 through 4.2.6, FortiSandbox 4.0.0 through 4.0.4 allows attacker to execute unauthorized code or commands via crafted HTTP requests.
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to execute unauthorized code or commands via specially crafted packets.
A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, FortiPAM versions 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiSwitchManager versions 7.2.0 through 7.2.3, 7.0.0 through 7.0.3 allows attacker to execute unauthorized code or commands via specially crafted packets.
An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to execute unauthorized code or commands via via crafted API requests.
A improper access control in Fortinet FortiPortal version 7.0.0 through 7.0.6, Fortinet FortiPortal version 7.2.0 through 7.2.1 allows attacker to escalate its privilege via specifically crafted HTTP requests.
CVE-2023-34991 is a critical SQL injection vulnerability in Fortinet FortiWLM versions 8.2.2 through 8.6.5 that allows unauthenticated remote attackers to execute arbitrary code or commands via crafted HTTP requests. This vulnerability enables full compromise of affected systems without requiring user interaction or authentication. The flaw arises from improper neutralization of special elements in SQL commands, leading to unauthorized code execution. Although no known exploits are currently reported in the wild, the high CVSS score of 9.3 indicates significant risk. European organizations using FortiWLM for wireless LAN management are at risk of data breaches, service disruption, and potential lateral movement within networks.
CVE-2023-26205 is a high-severity privilege escalation vulnerability in Fortinet FortiADC versions 6.1.x through 7.1.2. It allows an authenticated low-privileged attacker to escalate to super_admin by exploiting improper access control in the fabric automation CLI script configuration. The vulnerability requires no user interaction and can be exploited remotely over the network. The impact includes full administrative control over the FortiADC device, potentially compromising confidentiality and integrity of network traffic and configurations. No known exploits are currently reported in the wild. European organizations using FortiADC for application delivery and load balancing are at risk, especially those with exposed management interfaces.
CVE-2023-36553 is a critical OS command injection vulnerability in multiple versions of Fortinet FortiSIEM, allowing unauthenticated attackers to execute arbitrary code or commands via crafted API requests. The flaw arises from improper neutralization of special elements in OS commands, affecting versions from 4.7.2 through 5.4.0. Exploitation requires no authentication or user interaction and can lead to full system compromise, impacting confidentiality, integrity, and availability. No known exploits are currently reported in the wild, but the high CVSS score (9.3) indicates a severe risk. European organizations using FortiSIEM for security information and event management are at risk, especially in countries with high Fortinet market penetration and critical infrastructure reliance.
CVE-2023-41840 is a high-severity vulnerability affecting Fortinet FortiClientWindows versions 7.0.9 and 7.2.0. It arises from an untrusted search path issue that enables a DLL hijacking attack via a malicious OpenSSL engine library placed in the search path. Exploiting this vulnerability allows an attacker with limited privileges to escalate their privileges without requiring user interaction. The vulnerability impacts confidentiality, integrity, and availability of affected systems. No known exploits are currently reported in the wild. European organizations using FortiClientWindows, especially in countries with high Fortinet market penetration and critical infrastructure reliance on Fortinet products, are at risk.
CVE-2023-41843 is a high-severity cross-site scripting (XSS) vulnerability in multiple versions of Fortinet FortiSandbox, allowing attackers to execute unauthorized code or commands via crafted HTTP requests. The flaw arises from improper input neutralization during web page generation, affecting versions 2.4.1 through 4.4.1. Exploitation requires user interaction but no authentication, with potential impacts on confidentiality, integrity, and availability. Although no known exploits are currently in the wild, the vulnerability poses significant risk to organizations using FortiSandbox for advanced threat detection. European organizations relying on Fortinet products, especially in critical infrastructure and finance sectors, should prioritize patching and implement strict input validation and network segmentation. Countries with high Fortinet market penetration and strategic importance, such as Germany, France, the UK, and the Netherlands, are most likely to be affected.
CVE-2023-41680 is a high-severity cross-site scripting (XSS) vulnerability affecting multiple versions of Fortinet FortiSandbox. It allows an unauthenticated attacker to execute unauthorized code or commands by sending crafted HTTP requests. The vulnerability impacts confidentiality, integrity, and availability of the affected systems. Exploitation requires user interaction but no prior authentication. Although no known exploits are currently reported in the wild, the vulnerability poses significant risks to organizations relying on FortiSandbox for threat detection and sandboxing. European organizations using FortiSandbox should prioritize patching and implement strict input validation and network segmentation to mitigate risks. Countries with high Fortinet market penetration and critical infrastructure reliance on FortiSandbox are most at risk. The CVSS score of 7.3 reflects the high impact and moderate complexity of exploitation.
CVE-2023-33303 is a high-severity vulnerability in Fortinet FortiEDR versions 5.0.0 through 5.0.1 caused by insufficient session expiration. This flaw allows an unauthenticated attacker to execute unauthorized code or commands via crafted API requests. The vulnerability has a CVSS score of 7.7, indicating significant impact on confidentiality, integrity, and availability. Exploitation does not require user interaction or privileges but has a high attack complexity. No known exploits are currently reported in the wild.
CVE-2023-41679 is a high-severity vulnerability in Fortinet FortiManager versions 6.0 through 7.2.2 that allows a remote, authenticated attacker with device management permissions in one ADOM to add or delete CLI scripts in other ADOMs. This improper access control flaw enables unauthorized code execution or command injection across administrative domains, potentially compromising confidentiality, integrity, and availability of managed devices. Exploitation requires authentication with limited privileges but no user interaction, and the vulnerability has a CVSS score of 7.7. No known exploits are currently reported in the wild. European organizations using FortiManager for centralized network management are at risk, especially those with complex ADOM configurations. Mitigation involves applying vendor patches when available, restricting device management permissions, and monitoring ADOM activities closely.
CVE-2023-25607 is a high-severity OS command injection vulnerability affecting multiple versions of Fortinet FortiAnalyzer, FortiManager, and FortiADC products. The flaw arises from improper neutralization of special elements in the management interface, allowing an authenticated attacker with at least read permissions on system settings to execute arbitrary shell commands. Exploitation requires low attack complexity and no user interaction, potentially compromising confidentiality, integrity, and availability of affected systems. No known exploits are currently reported in the wild. European organizations using vulnerable Fortinet products are at risk, especially those in critical infrastructure and government sectors. Mitigation involves applying vendor patches once available, restricting access to management interfaces, and monitoring for suspicious command execution. Countries with high Fortinet market penetration and strategic cyber targets, such as Germany, France, UK, and the Netherlands, are most likely affected. The vulnerability’s CVSS score is 7.4, reflecting its high impact and moderate exploit complexity. Defenders should prioritize patching and access control to prevent unauthorized command execution.
CVE-2023-34992 is a critical OS command injection vulnerability in Fortinet FortiSIEM versions 6.4.0 through 7.0.0. It allows unauthenticated remote attackers to execute arbitrary code or commands by sending specially crafted API requests. The vulnerability arises from improper neutralization of special elements in OS commands, enabling full compromise of affected systems. Exploitation requires no authentication or user interaction and can impact confidentiality, integrity, and availability. Although no known exploits are currently reported in the wild, the high CVSS score (9.6) indicates a severe risk.
