Vulnerabilities (CVE)

Filtered by vendor Fortinet Subscribe
Filtered by product Fortipam
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-41678 1 Fortinet 2 Fortios, Fortipam 2023-12-15 N/A 8.8 HIGH
A double free in Fortinet FortiOS versions 7.0.0 through 7.0.5, FortiPAM version 1.0.0 through 1.0.3, 1.1.0 through 1.1.1 allows attacker to execute unauthorized code or commands via specifically crafted request.
CVE-2023-36639 1 Fortinet 3 Fortios, Fortipam, Fortiproxy 2023-12-15 N/A 8.8 HIGH
A use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.4, 7.0.0 through 7.0.10, FortiOS versions 7.4.0, 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.12, 6.2.0 through 6.2.15, 6.0.0 through 6.0.17, FortiPAM versions 1.0.0 through 1.0.3 allows attacker to execute unauthorized code or commands via specially crafted API requests.