Latest fortinet fortivoice Vulnerabilities

● CVE-2023-37932

An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability [CWE-22] in FortiVoiceEntreprise version 7.0.0 and before 6.4.7 allows an authenticated attacker to read...

Fortinet FortiVoice>=6.0.0<=6.0.12

Fortinet FortiVoice>=6.4.0<6.4.8

Fortinet FortiVoice=7.0.0

● CVE-2022-27488

A cross-site request forgery (CSRF) in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x, FortiSwitch version 7.0.0 through 7.0.4, 6.4.0 through 6.4.10, 6.2.0 through 6.2.7, 6.0.x, FortiMail version ...

Fortinet Fortiai=1.1.0

Fortinet Fortiai=1.5.3

Fortinet FortiMail>=6.0.0<=6.0.12

Fortinet FortiMail>=6.2.0<=6.2.9

Fortinet FortiMail>=6.4.0<=6.4.6

Fortinet FortiMail>=7.0.0<=7.0.3

and 12 more

● CVE-2021-42755

An integer overflow / wraparound vulnerability [CWE-190] in FortiSwitch 7.0.2 and below, 6.4.9 and below, 6.2.x, 6.0.x; FortiRecorder 6.4.2 and below, 6.0.10 and below; FortiOS 7.0.2 and below, 6.4.8 ...

Fortinet FortiProxy>=1.0.0<=1.0.7

Fortinet FortiProxy>=1.1.0<=1.1.6

Fortinet FortiProxy>=1.2.0<=1.2.13

Fortinet FortiProxy>=2.0.0<=2.0.6

Fortinet FortiProxy=7.0.0

Fortinet FortiVoice=5.3.0

and 165 more

● CVE-2021-42757

A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authenticated local attacker to achieve arbitrary code execution via specia...

Fortinet FortiADC>=5.0.0<=6.1.5

Fortinet FortiADC>=6.2.0<=6.2.2

Fortinet FortiAnalyzer>=6.0.0<=6.4.7

Fortinet FortiAnalyzer>=7.0.0<=7.0.2

Fortinet FortiMail>=5.4.0<=6.2.7

Fortinet FortiMail>=6.4.0<=6.4.6

and 26 more

● CVE-2020-9294

An improper authentication vulnerability in FortiMail 5.4.10, 6.0.7, 6.2.2 and earlier and FortiVoiceEntreprise 6.0.0 and 6.0.1 may allow a remote unauthenticated attacker to access the system as a le...

Fortinet FortiMail<=5.4.10

Fortinet FortiMail>=6.0.0<=6.0.7

Fortinet FortiMail>=6.2.0<=6.2.2

Fortinet FortiVoice>=6.0.0<=6.0.1

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.