Fortinet: >> Fortiportal Security Vulnerabilities
A password management vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to carry out information disclosure via the FortiAnalyzer Management View.
CVSS Score
7.5
EPSS Score
0.003
Published
2017-05-27
A Cross-Site Scripting vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via the 'Name' and 'Description' inputs in the 'Add Revision Backup' functionality.
CVSS Score
6.1
EPSS Score
0.003
Published
2017-05-27
An open redirect vulnerability in Fortinet FortiPortal 4.0.0 and below allows attacker to execute unauthorized code or commands via the url parameter.
CVSS Score
6.1
EPSS Score
0.003
Published
2017-05-27
A weak password recovery vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows attacker to carry out information disclosure via the Forgotten Password feature.
CVSS Score
7.5
EPSS Score
0.003
Published
2017-05-27
Page 5