The Vigil@nce team watches public vulnerabilities impacting your computers, and then offers security solutions, a vigilance database and tools to fix them.

Computer vulnerabilities of Fortinet FortiManager Virtual Appliance

FortiManager: information disclosure via Vdoms Settings
An attacker can bypass access restrictions to data via Vdoms Settings of FortiManager, in order to obtain sensitive information...
CERTFR-2018-AVI-411, CVE-2018-1353, FG-IR-18-016, VIGILANCE-VUL-27097
FortiAnalyzer, FortiManager: Cross Site Scripting via CA And CRL Certificate View Page
An attacker can trigger a Cross Site Scripting via CA And CRL Certificate View Page of FortiAnalyzer/FortiManager, in order to run JavaScript code in the context of the web site...
CERTFR-2018-AVI-326, CVE-2017-17541, FG-IR-17-305, VIGILANCE-VUL-26643
FortiAnalyzer, FortiManager: open redirect via PDF File
An attacker can deceive the user via PDF File of FortiAnalyzer/FortiManager, in order to redirect him to a malicious site...
CERTFR-2018-AVI-303, CVE-2018-1355, FG-IR-18-022, VIGILANCE-VUL-26527
FortiAnalyzer, FortiManager: Cross Site Scripting via Avatar Picture
An attacker can trigger a Cross Site Scripting via Avatar Picture of FortiAnalyzer/FortiManager, in order to run JavaScript code in the context of the web site...
CERTFR-2018-AVI-303, CVE-2018-1354, FG-IR-18-014, VIGILANCE-VUL-26526
FortiManager: Cross Site Scripting
An attacker can trigger a Cross Site Scripting of FortiManager, in order to run JavaScript code in the context of the web site...
CERTFR-2018-AVI-303, CVE-2018-1351, FG-IR-18-006, VIGILANCE-VUL-26525
FortiAnalyzer, FortiManager: open redirect
An attacker can deceive the user of FortiAnalyzer / FortiManager, in order to redirect him to a malicious site...
CVE-2017-3126, FG-IR-17-014, VIGILANCE-VUL-22773
FortiAnalyzer, FortiManager: Cross Site Scripting via Report Filters
An attacker can trigger a Cross Site Scripting via Report Filters of FortiAnalyzer or FortiManager, in order to run JavaScript code in the context of the web site...
CVE-2015-7363, VIGILANCE-VUL-20790
Fortinet FortiManager / FortiAnalyzer: four vulnerabilities
An attacker can use several vulnerabilities of Fortinet FortiManager / FortiAnalyzer...
1624459, 1624561, CVE-2016-3193, CVE-2016-3194, CVE-2016-3195, CVE-2016-3196, VIGILANCE-VUL-19914
Fortinet FortiManager, FortiAnalyzer: Cross Site Scripting of /report/graphic/upload/
An attacker can trigger a Cross Site Scripting of Fortinet FortiManager/FortiAnalyzer, in order to run JavaScript code in the context of the web site...
VIGILANCE-VUL-19291
OpenSSL: use after free via PSK Identify Hint
An attacker can force the usage of a freed memory area via PSK Identify Hint of an OpenSSL multi-threaded client, in order to trigger a denial of service, and possibly to run code...
1972951, 1976113, 1976148, 1981612, 2003480, 2003620, 2003673, 9010051, BSA-2016-006, bulletinjan2016, c05398322, CERTFR-2015-AVI-517, cisco-sa-20151204-openssl, cpuoct2017, CVE-2015-3196, DSA-2020-062, DSA-3413-1, FEDORA-2015-d87d60b9a9, FreeBSD-SA-15:26.openssl, HPESBHF03709, JSA10759, NTAP-20151207-0001, openSUSE-SU-2015:2288-1, openSUSE-SU-2015:2289-1, RHSA-2015:2617-01, SA40100, SB10203, SOL12824341, SOL30714460, SOL55540723, SOL86772626, SSA:2015-349-04, USN-2830-1, VIGILANCE-VUL-18437
Our database contains other pages. You can request a free trial to read them.

Display information about Fortinet FortiManager Virtual Appliance: