Fortinet Fortiisolator — known CVE vulnerabilities

Every CVE whose affected-product data names Fortinet Fortiisolator, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (10)

• CVE-2020-6649 — CVSS 9.8 (critical): An insufficient session expiration vulnerability in FortiNet's FortiIsolator version 2.0.1 and below may allow an attacker to reuse the…
• CVE-2024-55590 — CVSS 8.8 (high): Multiple improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet…
• CVE-2021-41020 — CVSS 8.8 (high): An improper access control vulnerability [CWE-284] in FortiIsolator versions 2.3.2 and below may allow an authenticated, non privileged…
• CVE-2024-33507 — CVSS 7.4 (high): An insufficient session expiration vulnerability [CWE-613] and an incorrect authorization vulnerability [CWE-863] in FortiIsolator 2.4.0…
• CVE-2024-54024 — CVSS 7.2 (high): An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet…
• CVE-2024-27779 — CVSS 6.7 (medium): An insufficient session expiration vulnerability [CWE-613] in FortiSandbox FortiSandbox version 4.4.4 and below, version 4.2.6 and below…
• CVE-2022-22298 — CVSS 6.7 (medium): A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiIsolator version 1.0.0…
• CVE-2024-54025 — CVSS 6.7 (medium): An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet…
• CVE-2020-6643 — CVSS 5.4 (medium): An improper neutralization of input vulnerability in the URL Description in Fortinet FortiIsolator version 1.2.2 allows a remote…
• CVE-2024-32124 — CVSS 4.3 (medium): An improper access control vulnerability [CWE-284] in FortiIsolator version 2.4.4, version 2.4.3, 2.3 all versions logging component may…