Fortinet Fortitoken Mobile vulnerabilities
3 known vulnerabilities affecting fortinet/fortitoken_mobile.
Total CVEs
3
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM3
Vulnerabilities
Page 1 of 1
CVE-2026-44279P4MEDIUMCVSS 5.5v5.2.0v5.2.1+3 more2026-05-12
CVE-2026-44279 [MEDIUM] CWE-926 CVE-2026-44279: An improper export of android application components vulnerability in Fortinet FortiTokenAndroid 6.2
An improper export of android application components vulnerability in Fortinet FortiTokenAndroid 6.2 all versions, FortiTokenAndroid 6.1 all versions, FortiTokenAndroid 5.2 all versions may allow attacker to disclose information via an exported Content Provider URI.
nvd
CVE-2021-22131P4MEDIUMCVSS 5.4v0.4.10v0.4.20+20 more2022-07-18
CVE-2021-22131 [MEDIUM] CWE-295 CVE-2021-22131: A improper validation of certificate with host mismatch in Fortinet FortiTokenAndroid version 5.0.3
A improper validation of certificate with host mismatch in Fortinet FortiTokenAndroid version 5.0.3 and below, Fortinet FortiTokeniOS version 5.2.0 and below, Fortinet FortiTokenWinApp version 4.0.3 and below allows attacker to retrieve information disclosed via man-in-the-middle attacks.
nvd
CVE-2021-44166P4MEDIUMCVSS 4.1v4.0.0v4.0.1+9 more2022-03-02
CVE-2021-44166 [MEDIUM] CVE-2021-44166: An improper access control vulnerability [CWE-284 ] in FortiToken Mobile (Android) external push not
An improper access control vulnerability [CWE-284 ] in FortiToken Mobile (Android) external push notification 5.1.0 and below may allow a remote attacker having already obtained a user's password to access the protected system during the 2FA procedure, even though the deny button is clicked by the legitimate user.
nvd