| Package | Affected versions | Patched versions |
|---|---|---|
| fortianalyzer | ≥ 6.2.0, < 7.0.10≥ 7.2.0, < 7.2.4≥ 7.4.0, < 7.4.2 | 7.0.107.2.47.4.2 |
| fortianalyzer big data | = 6.2.5≥ 6.4.5, ≤ 6.4.7≥ 7.0.1, ≤ 7.0.6≥ 7.2.0, < 7.2.6 | 7.2.6 |
| fortimanager | ≥ 6.2.0, < 7.0.10≥ 7.2.0, < 7.2.4≥ 7.4.0, < 7.4.2 | 7.0.107.2.47.4.2 |
| fortiportal | ≥ 5.3.0, < 6.0.15 | 6.0.15 |
A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet allows a privileged attacker to execute unauthorized code or commands via specially crafted command arguments.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free