Vulnerabilities (CVE)

Filtered by vendor Fortinet Subscribe
Filtered by product Fortiadc
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-26205 1 Fortinet 1 Fortiadc 2023-11-20 N/A 8.8 HIGH
An improper access control vulnerability [CWE-284] in FortiADC automation feature 7.1.0 through 7.1.2, 7.0 all versions, 6.2 all versions, 6.1 all versions may allow an authenticated low-privileged attacker to escalate their privileges to super_admin via a specific crafted configuration of fabric automation CLI script.
CVE-2022-26120 1 Fortinet 1 Fortiadc 2022-07-25 N/A 8.8 HIGH
Multiple improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerabilities [CWE-89] in FortiADC management interface 7.0.0 through 7.0.1, 5.0.0 through 6.2.2 may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.