Fortinet Fortiai vulnerabilities

2 vulnerabilities

Known vulnerabilities in Fortinet Fortiai, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9CVE-2021-24023fortinetfortiai+1
EPSS score
0.75%
An improper input validation in FortiAI v1.4.0 and earlier may allow an authenticated user to gain system shell access via a malicious payload in the "diagnose" command.8.8CVE-2022-27488fortinetfortiai+5
EPSS score
0.49%
A cross-site request forgery (CSRF) in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x, FortiSwitch version 7.0.0 through 7.0.4, 6.4.0 through 6.4.10, 6.2.0 through 6.2.7, 6.0.x, FortiMail version 7.0.0 through 7.0.3, 6.4.0 through 6.4.6, 6.2.x, 6.0.x FortiRecorder version 6.4.0 through 6.4.2, 6.0.x, 2.7.x, 2.6.x, FortiNDR version 1.x.x allows a remote unauthenticated attacker to execute commands on the CLI via tricking an authenticated administrator to execute malicious GET requests.