Fortinet Fortinet Fortisoar
6 CVEs affecting Fortinet Fortinet Fortisoar. Latest disclosed: 2022-11-02. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-23443 | High | 7.5 | 2022-05-04 | An improper access control in Fortinet FortiSOAR before 7.2.0 allows unauthenticated attackers to access gateway API data via crafted HTTP GET requests. |
CVE-2022-29061 | High | 7.2 | 2022-09-09 | An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiSOAR before 7.2.1 allows… |
CVE-2022-30298 | High | 7.0 | 2022-09-06 | An improper privilege management vulnerability [CWE-269] in Fortinet FortiSOAR before 7.2.1 allows a GUI user who has already found a way to modify system file… |
CVE-2022-35847 | Medium | 6.3 | 2022-09-06 | An improper neutralization of special elements used in a template engine vulnerability [CWE-1336] in FortiSOAR management interface 7.2.0, 7.0.0 through 7.0.3… |
CVE-2022-29062 | Medium | 6.3 | 2022-09-06 | Multiple relative path traversal vulnerabilities [CWE-23] in Fortinet FortiSOAR before 7.2.1 allows an authenticated attacker to write to the underlying filesy… |
CVE-2022-42473 | Medium | 5.3 | 2022-11-02 | A missing authentication for a critical function vulnerability in Fortinet FortiSOAR 6.4.0 - 6.4.4 and 7.0.0 - 7.0.3 and 7.2.0 allows an attacker to disclose i… |