Fortinet Inc Fortinet Fortimanager vulnerabilities

2 known vulnerabilities affecting fortinet_inc/fortinet_fortimanager.

Total CVEs

2

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2018-1360HIGHCVSS 8.1v5.2.0 to 5.2.7v5.4.0+1 more2019-04-25

CVE-2018-1360 [HIGH] CWE-319 CVE-2018-1360: A cleartext transmission of sensitive information vulnerability in Fortinet FortiManager 5.2.0 throu A cleartext transmission of sensitive information vulnerability in Fortinet FortiManager 5.2.0 through 5.2.7, 5.4.0 and 5.4.1 may allow an unauthenticated attacker in a man in the middle position to retrieve the admin password via intercepting REST API JSON responses.

CVE-2018-1351MEDIUMCVSS 4.8vFortiManager 6.0.0 and below versions2018-06-28

CVE-2018-1351 [MEDIUM] CWE-79 CVE-2018-1351: A Cross-site Scripting (XSS) vulnerability in Fortinet FortiManager 6.0.0, 5.6.6 and below versions A Cross-site Scripting (XSS) vulnerability in Fortinet FortiManager 6.0.0, 5.6.6 and below versions allows attacker to execute HTML/javascript code via managed remote devices CLI commands by viewing the remote device CLI config installation log.