Fortinet Fortianalyzer Firmware vulnerabilities

12 CVEs affecting Fortinet Fortianalyzer Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-17541, published 2018-07-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-3620, published 2015-05-12. Medium severity, CVSS 4.3. EPSS: 2.4% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the advanced dataset reports page in Fortinet FortiAnalyzer 5.0.0 through 5.0.10 and 5.2.0 through 5.2.1 and FortiManager 5.0.3 through 5.0.10 and 5.2.0…
CVE-2013-6826, published 2013-11-20. Medium severity, CVSS 6.8. EPSS: 1.9% chance of exploitation in the next 30 days. cgi-bin/module//sysmanager/admin/SYSAdminUserDialog in Fortinet FortiAnalyzer before 5.0.5 does not properly validate the csrf_token parameter, which allows remote attackers to perform cross-site…
CVE-2014-2336, published 2014-10-31. Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet FortiManager before 5.0.7 and FortiAnalyzer before 5.0.7 allow remote attackers to inject arbitrary web…
CVE-2014-2334, published 2014-10-31. Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet FortiAnalyzer before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified…
CVE-2014-2335, published 2014-10-31. Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet FortiManager before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified…
CVE-2016-3195, published 2016-08-19. Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the Web-UI in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiAnalyzer 5.x before 5.0.13 and 5.2.x before 5.2.6 allows remote…
CVE-2016-3194, published 2016-08-19. Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the address added page in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiAnalyzer 5.x before 5.0.13 and 5.2.x before 5.2.6 allows…
CVE-2016-3196, published 2016-08-05. Medium severity, CVSS 5.4. EPSS: 1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Fortinet FortiAnalyzer 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 allows remote authenticated users…
CVE-2017-3126, published 2017-05-27. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. An Open Redirect vulnerability in Fortinet FortiAnalyzer 5.4.0 through 5.4.2 and FortiManager 5.4.0 through 5.4.2 allows attacker to execute unauthorized code or commands via the next parameter.
CVE-2017-17541, published 2018-07-16. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. A Cross-site Scripting (XSS) vulnerability in Fortinet FortiManager 6.0.0, 5.6.4 and below versions, FortiAnalyzer 6.0.0, 5.6.4 and below versions allows inject Javascript code and HTML tags through…

Latest

CVE-2015-7363, published 2016-10-07. Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the advanced settings page in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.3, in hardware models with a hard disk, and FortiAnalyzer 5.x…
CVE-2016-3193, published 2016-08-19. Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the appliance web-application in Fortinet FortiManager 5.x before 5.0.12, 5.2.x before 5.2.6, and 5.4.x before 5.4.1 and FortiAnalyzer 5.x before 5.0.13,…