Total vulnerabilities in the database
An improper certificate validation vulnerability [CWE-295] in FortiManager 7.0.1 and below, 6.4.6 and below; FortiAnalyzer 7.0.2 and below, 6.4.7 and below; FortiOS 6.2.x and 6.0.x; FortiSandbox 4.0.x, 3.2.x and 3.1.x may allow a network adjacent and unauthenticated attacker to man-in-the-middle the communication between the listed products and some external peers.
| Software | From | Fixed in |
|---|---|---|
| fortinet / fortisandbox | 4.0.0 | 4.0.0.x |
| fortinet / fortianalyzer | 6.0.0 | 6.0.12.x |
| fortinet / fortisandbox | 3.1.0 | 3.1.5.x |
| fortinet / fortisandbox | 4.0.1 | 4.0.1.x |
| fortinet / fortisandbox | 4.0.2 | 4.0.2.x |
| fortinet / fortios | 6.2.0 | 6.2.15.x |
| fortinet / fortios | 6.0.0 | 6.0.17.x |
| fortinet / fortios | 5.6.10 | 5.6.14.x |
| fortinet / fortisandbox | 3.0.1 | 3.0.1.x |
| fortinet / fortisandbox | 3.2.0 | 3.2.4.x |
| fortinet / fortisandbox | 3.0.0 | 3.0.7.x |
| fortinet / fortianalyzer | 7.0.0 | 7.0.0.x |
| fortinet / fortianalyzer | 7.0.1 | 7.0.1.x |
| fortinet / fortianalyzer | 7.0.2 | 7.0.2.x |
| fortinet / fortianalyzer | 6.2.9 | 6.4.7.x |
| fortinet / fortimanager | 7.0.0 | 7.0.0.x |
| fortinet / fortimanager | 7.0.1 | 7.0.1.x |
| fortinet / fortimanager | 6.4.0 | 6.4.6.x |
| fortinet / fortimanager | 6.2.0 | 6.2.11.x |
| fortinet / fortimanager | 6.0.0 | 6.0.12.x |