CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Fortinet FortiManager Unauthenticated Remote Code Execution Vulnerability (CVE-2024-47575) Security Advisory
[Affected Scope] Multiple versions of FortiManager and FortiManager Cloud (7.6.0, 7.4.0-7.4.4, 7.2.0-7.2.7, 7.0.0-7.0.12, 6.4.0-6.4.14, 6.2.0-6.2.12, etc.)
[Impact] An unauthenticated remote attacker can execute arbitrary code or system commands via specially crafted requests, potentially leading to full system compromise
[Mitigation] Immediately upgrade to the official patched versions or apply workarounds to restrict unauthorized FGFM connections
Fortinet FortiOS / FortiProxy / FortiPAM Format String Vulnerability (CVE-2024-23113) Remote Code Execution (RCE) Analysis and Mitigation Guide
[Affected Scope] FortiOS (7.0.0~7.0.13, 7.2.0~7.2.6, 7.4.0~7.4.2), FortiProxy (7.0.0~7.0.14, 7.2.0~7.2.8, 7.4.0~7.4.2), FortiPAM, and FortiSwitchManager specific versions
[Impact] Unauthenticated remote attackers can execute unauthorized code or commands with root privileges via specially crafted packets
[Mitigation] Upgrade to the official patched versions immediately, or disable the FGFM (FortiGate Federation Management) service on interfaces as a temporary workaround