Fortinet Fortiap-C vulnerabilities

2 CVEs affecting Fortinet Fortiap-C, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-25608, published 2023-09-13.

More from Fortinet.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-25608, published 2023-09-13. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiAP-W2 7.2.0 through 7.2.1, 7.0.3 through 7.0.5, 7.0.0 through…
• CVE-2022-22301, published 2022-03-02. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] in FortiAP-C console 5.4.0 through 5.4.3, 5.2.0 through 5.2.1 may allow an authenticated attacker to…