DeutschShown in its original language — a full translation is planned for a future version.
Fortinet FortiOS und FortiProxy: Mehrere Schwachstellen
view advisory published 2024-06-11
Ein lokaler Angreifer kann mehrere Schwachstellen in Fortinet FortiOS und Fortinet FortiProxy ausnutzen, um Informationen offenzulegen und um einen Cross-Site Scripting Angriff durchzuführen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-23111US | medium4.8 | — | ||
An improper neutralization of input during web page Generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiOS version 7.4.3 and below, 7.2 all versions, 7.0 all version… | ||||
| CVE-2024-21754US | medium4.4 | Exploit | ||
A use of password hash with insufficient computational effort vulnerability [CWE-916] affecting FortiOS version 7.4.3 and below, 7.2 all versions, 7.0 all versions, 6.4 all version… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan