Vulnerabilidades do Fortinet Fortiadc
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Fortinet Fortiadc: 5 registro(s), com versões afetadas e correções.cpe:2.3:a:fortinet:fortiadc
CVE-2025-58412
Média · 6.1
CWE-80 19/11/2025
A improper neutralization of script-related html tags in a web page (basic xss)…
A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiADC 8.0.0, FortiADC 7.6.0 through 7.6.3, FortiADC 7.4 all versions, FortiADC 7.2 all versions may allow attacker to execute unauthorized code or commands via crafted URL.
CVE-2025-54971
Média · 6.5
CWE-532 18/11/2025
Insertion of Sensitive Information into Log File em Fortinet Fortiadc
An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiADC 7.4.0, FortiADC 7.2 all versions, FortiADC 7.1 all versions, FortiADC 7.0 all versions, FortiADC 6.2 all versions may allow an admin with read-only permission to get the external resources password via the logs of the product
CVE-2025-48839
Média · 6.6
CWE-787 18/11/2025
Out-of-bounds Write em Fortinet Fortiadc
An Out-of-bounds Write vulnerability [CWE-787] in FortiADC 8.0.0, 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.2 all versions may allow an authenticated attacker to execute arbitrary code via specially crafted HTTP requests.
CVE-2025-59921
Média · 6.5
CWE-200 14/10/2025
Exposure of Sensitive Information em Fortinet Fortiadc
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiADC version 7.4.0, version 7.2.3 and below, version 7.1.4 and below, 7.0 all versions, 6.2 all versions may allow an authenticated attacker to obtain sensitive data via crafted HTTP or HTTPs requests.
CVE-2018-13374
Média · 4.3
KEV Urgente · 71 Exploit público Ransomware CWE-732 22/01/2019
Fortinet FortiOS and FortiADC Improper Access Control Vulnerability
A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to obtain the LDAP server login credentials configured in FortiGate via pointing a LDAP server connectivity test request to a rogue LDAP server instead of the configured one.