CVE-2023-36556 is a high-severity escalation of privilege vulnerability in Fortinet FortiMail webmail versions 6.0.0 through 7.2.2. It allows an authenticated attacker to access other users' accounts within the same web domain by exploiting incorrect authorization via crafted HTTP/HTTPS requests. The vulnerability does not require user interaction but does require the attacker to have valid credentials. Exploitation can lead to full compromise of confidentiality, integrity, and availability of email communications. No public exploits are currently known. European organizations using affected FortiMail versions are at risk, especially those with large deployments of Fortinet products.
CVE-2023-41841 is a high-severity privilege escalation vulnerability affecting Fortinet FortiOS versions 7.0.0 through 7.0.11 and 7.2.0 through 7.2.4. The flaw allows an attacker with prof-admin profile privileges to perform unauthorized elevated actions due to improper authorization checks.
CVE-2023-42788 is a high-severity OS command injection vulnerability affecting multiple versions of Fortinet FortiAnalyzer and FortiManager. It allows a local attacker with low privileges to execute unauthorized commands by exploiting improper neutralization of special elements in CLI commands. The flaw exists in versions 6.2.0 through 7.4.0, impacting confidentiality, integrity, and availability of affected systems. No user interaction is required, but local access with low privileges is necessary. Although no known exploits are currently reported in the wild, the vulnerability’s potential impact is significant due to the critical role of FortiAnalyzer in network security monitoring and logging. European organizations using these Fortinet products are at risk, especially those in countries with high Fortinet market penetration and critical infrastructure reliance on these devices.
CVE-2023-29183 is a high-severity cross-site scripting (XSS) vulnerability affecting Fortinet FortiProxy and FortiOS GUI versions 6.2.0 through 7.2.4. It allows an authenticated attacker with low privileges to execute arbitrary JavaScript code via crafted guest management settings, potentially compromising confidentiality, integrity, and availability. Exploitation requires user interaction but no administrative privileges. No known exploits are currently in the wild. European organizations using affected Fortinet products, especially in critical infrastructure and large enterprises, face significant risk. Mitigations include promptly applying vendor patches once available, restricting access to management interfaces, and implementing strict input validation and Content Security Policies.
CVE-2023-34984 is a high-severity vulnerability in Fortinet FortiWeb versions 6.3.6 through 7.2.1 that allows remote attackers to execute unauthorized code or commands via specially crafted HTTP requests. The flaw stems from a protection mechanism failure, enabling attackers to compromise confidentiality, integrity, and availability of affected systems. Exploitation requires no privileges but does require user interaction, and the attack complexity is high. No known exploits are currently in the wild, but the vulnerability poses significant risks to organizations relying on FortiWeb for web application security. European organizations using these FortiWeb versions should prioritize patching and implement strict network controls to mitigate potential exploitation. Countries with high Fortinet market penetration and critical infrastructure reliance on FortiWeb are at greater risk.
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6.4.12 and below, version 6.0.16 and below and FortiProxy version 7.2.3 and below, version 7.0.9 and below, version 2.0.12 and below, version 1.2 all versions, version 1.1 all versions SSL-VPN may allow a remote attacker to execute arbitrary code or commands via specifically crafted requests.
CVE-2022-41328 is a path traversal vulnerability in Fortinet FortiOS that allows a local privileged attacker to read and write arbitrary files using crafted CLI commands. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data.
Fortinet FortiOS SSL-VPN contains a heap-based buffer overflow vulnerability that allows unauthenticated remote attackers to execute arbitrary code or commands. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns. No specific affected versions or patch information is provided in the available data.
CVE-2022-40684 is an authentication bypass vulnerability affecting multiple Fortinet products including FortiOS, FortiProxy, and FortiSwitchManager. This flaw allows unauthenticated attackers to perform administrative operations via specially crafted HTTP or HTTPS requests. The vulnerability has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.
CVE-2018-13374 is an improper access control vulnerability in Fortinet FortiOS and FortiADC. It allows attackers to retrieve LDAP server login credentials configured in FortiGate by directing an LDAP server connectivity test to a malicious LDAP server. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns.
CVE-2018-13382 is an improper authorization vulnerability in Fortinet FortiOS and FortiProxy SSL VPN web portal that allows an unauthenticated attacker to modify user passwords. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns. No specific affected versions or patch information is provided in the input data.
CVE-2018-13383 is a heap buffer overflow vulnerability in Fortinet FortiOS and FortiProxy that can cause the SSL VPN web service to terminate for logged-in users. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.
CVE-2021-44168 is a vulnerability in Fortinet FortiOS where the 'execute restore src-vis' command allows arbitrary file download without integrity checking. This flaw enables attackers to download files from the system arbitrarily. The vulnerability has been exploited in the wild and is considered high severity.
CVE-2019-5591 is a vulnerability in Fortinet FortiOS default configuration that allows an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the LDAP server. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns. It is classified as high severity due to the potential exposure of sensitive data and active exploitation.
CVE-2020-12812 is an improper authentication vulnerability in Fortinet FortiOS SSL VPN that allows bypassing the second-factor authentication (FortiToken) by altering the case of the username during login. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns.
Fortinet FortiOS SSL VPN web portal contains a path traversal vulnerability that may allow an unauthenticated attacker to download FortiOS system files through specially crafted HTTP resource requests.
