Total vulnerabilities in the database
A use of externally-controlled format string vulnerability [CWE-134] in Fortinet FortiManager version 7.4.0 through 7.4.1, version 7.2.0 through 7.2.3 and before 7.0.10, Fortinet FortiAnalyzer version 7.4.0 through 7.4.1, version 7.2.0 through 7.2.3 and before 7.0.10, Fortinet FortiAnalyzer-BigData before 7.2.5 and Fortinet FortiPortal version 6.0 all versions and version 5.3 all versions allows a privileged attacker to execute unauthorized code or commands via specially crafted command arguments.
| Software | From | Fixed in |
|---|---|---|
| fortinet / fortianalyzer | 7.2.0 | 7.2.4 |
| fortinet / fortimanager | 7.2.0 | 7.2.4 |
| fortinet / fortianalyzer_bigdata | 7.0.1 | 7.0.6.x |
| fortinet / fortianalyzer_bigdata | 6.4.5 | 6.4.7.x |
| fortinet / fortianalyzer_bigdata | 6.2.5 | 6.2.5.x |
| fortinet / fortianalyzer_bigdata | 7.2.0 | 7.2.6 |
| fortinet / fortimanager | 6.2.0 | 7.0.10 |
| fortinet / fortimanager | 7.4.0 | 7.4.2 |
| fortinet / fortianalyzer | 7.4.0 | 7.4.2 |
| fortinet / fortiportal | 5.3.0 | 6.0.14.x |
| fortinet / fortianalyzer | 6.2.0 | 7.0.10 |