NCSC-2024-0287

NLShown in its original language — a full translation is planned for a future version.

Kwetsbaarheden verholpen in Fortinet

view advisory published 2024-07-10

Fortinet heeft een aantal kwetsbaarheden verholpen in FortiAIOps, Fortinet FortiPortal, FortiWeb en Fortinet FortiExtender.

describes (6)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-33509US	medium4.8	0.19% (8th)	—	2024-07-09
An improper certificate validation vulnerability [CWE-295] in FortiWeb 7.2.0 through 7.2.1, 7.0 all versions, 6.4 all versions and 6.3 all versions may allow a remote and unauthent…
CVE-2024-27785US	medium6.5	0.43% (37th)	—	2024-07-09
An improper neutralization of formula elements in a CSV File [CWE-1236] vulnerability in Fortinet FortiAIOps 2.0.0 may allow a remote authenticated attacker to execute arbitrary co…
CVE-2024-27784US	medium6.5	0.76% (55th)	—	2024-07-09
Multiple Exposure of sensitive information to an unauthorized actor weaknesses [CWE-200] vulnerability in Fortinet FortiAIOps 2.0.0 may allow an authenticated, remote attacker to r…
CVE-2024-27782US	critical9.8	0.73% (54th)	—	2024-07-09
Multiple insufficient session expiration weaknesses [CWE-613] vulnerability in Fortinet FortiAIOps 2.0.0 may allow an attacker to re-use stolen old session tokens to perform unauth…
CVE-2024-23663US	high8.8	0.64% (50th)	—	2024-07-09
An improper access control in Fortinet FortiExtender 4.1.1 - 4.1.9, 4.2.0 - 4.2.6, 5.3.2, 7.0.0 - 7.0.4, 7.2.0 - 7.2.4 and 7.4.0 - 7.4.2 allows an attacker to create users with ele…
CVE-2024-21759US	medium4.3	0.29% (22nd)	—	2024-07-09
An authorization bypass through user-controlled key in Fortinet FortiPortal version 7.2.0, and versions 7.0.0 through 7.0.6 allows attacker to view unauthorized resources via HTTP…

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.