Fortinet Fortiaiops vulnerabilities

4 CVEs affecting Fortinet Fortiaiops, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-27785, published 2024-07-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-27784, published 2024-07-09. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. Multiple Exposure of sensitive information to an unauthorized actor weaknesses [CWE-200] vulnerability in Fortinet FortiAIOps 2.0.0 may allow an authenticated, remote attacker to retrieve sensitive…
CVE-2024-27782, published 2024-07-09. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. Multiple insufficient session expiration weaknesses [CWE-613] vulnerability in Fortinet FortiAIOps 2.0.0 may allow an attacker to re-use stolen old session tokens to perform unauthorized operations…
CVE-2024-27785, published 2024-07-09. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. An improper neutralization of formula elements in a CSV File [CWE-1236] vulnerability in Fortinet FortiAIOps 2.0.0 may allow a remote authenticated attacker to execute arbitrary commands on a…
CVE-2024-27783, published 2024-07-09. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. Multiple cross-site request forgery (CSRF) weaknesses [CWE-352] vulnerability in Fortinet FortiAIOps 2.0.0 may allow an unauthenticated remote attacker to perform arbitrary actions on behalf of an…