Fortinet Fortianalyzer Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Fortinet Fortianalyzer Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (12)

• CVE-2013-6826 — CVSS 6.8 (medium): cgi-bin/module//sysmanager/admin/SYSAdminUserDialog in Fortinet FortiAnalyzer before 5.0.5 does not properly validate the csrf_token…
• CVE-2017-3126 — CVSS 6.1 (medium): An Open Redirect vulnerability in Fortinet FortiAnalyzer 5.4.0 through 5.4.2 and FortiManager 5.4.0 through 5.4.2 allows attacker to…
• CVE-2016-3194 — CVSS 6.1 (medium): Cross-site scripting (XSS) vulnerability in the address added page in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 and…
• CVE-2016-3195 — CVSS 6.1 (medium): Cross-site scripting (XSS) vulnerability in the Web-UI in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiAnalyzer…
• CVE-2017-17541 — CVSS 6.1 (medium): A Cross-site Scripting (XSS) vulnerability in Fortinet FortiManager 6.0.0, 5.6.4 and below versions, FortiAnalyzer 6.0.0, 5.6.4 and below…
• CVE-2015-7363 — CVSS 5.4 (medium): Cross-site scripting (XSS) vulnerability in the advanced settings page in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.3…
• CVE-2016-3193 — CVSS 5.4 (medium): Cross-site scripting (XSS) vulnerability in the appliance web-application in Fortinet FortiManager 5.x before 5.0.12, 5.2.x before 5.2.6…
• CVE-2016-3196 — CVSS 5.4 (medium): Cross-site scripting (XSS) vulnerability in Fortinet FortiAnalyzer 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiManager 5.x before…
• CVE-2014-2334 — CVSS 4.3 (medium): Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet FortiAnalyzer before 5.0.7 allow remote attackers…
• CVE-2014-2335 — CVSS 4.3 (medium): Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet FortiManager before 5.0.7 allow remote attackers…
• CVE-2014-2336 — CVSS 4.3 (medium): Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet FortiManager before 5.0.7 and FortiAnalyzer…
• CVE-2015-3620 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in the advanced dataset reports page in Fortinet FortiAnalyzer 5.0.0 through 5.0.10 and 5.2.0…