NCSC-2024-0261

NLShown in its original language — a full translation is planned for a future version.

Kwetsbaarheid verholpen in Fortinet FortiOS

view advisory published 2024-06-14

Fortinet heeft kwetsbaarheden verholpen in FortiOS.

describes (6)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-31495US	low2.7	0.53% (44th)	—	2024-06-11
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiPortal versions 7.0.0 through 7.0.6 and version 7.2.0 allows privileged user…
CVE-2024-26010US	high7.5	0.79% (56th)	—	2024-06-11
A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.3, FortiOS 7.2.0 through 7.2.7, FortiOS 7.0.0 through 7.0.14, FortiOS 6.4 all versions, FortiOS 6.…
CVE-2024-23111US	medium4.8	1.04% (64th)	—	2024-06-11
An improper neutralization of input during web page Generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiOS version 7.4.3 and below, 7.2 all versions, 7.0 all version…
CVE-2024-23110US	high7.8	0.28% (20th)	—	2024-06-11
A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, 6.0 all versio…
CVE-2024-21754US	medium4.4	3.47% (89th)	Exploit	2024-06-11
A use of password hash with insufficient computational effort vulnerability [CWE-916] affecting FortiOS version 7.4.3 and below, 7.2 all versions, 7.0 all versions, 6.4 all version…
CVE-2023-46720US	high7.8	0.28% (19th)	—	2024-06-11
A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.12 and 6.4.6 through 6.4.15 and 6.2.9 through 6.2.16 and…

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.