CVSS: 3.7EPSS: 0%CPEs: 7EXPL: 0CVE-2024-36511
https://notcve.org/view.php?id=CVE-2024-36511
10 Sep 2024 — An improperly implemented security check for standard vulnerability [CWE-358] in FortiADC Web Application Firewall (WAF) 7.4.0 through 7.4.4, 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.2 all versions, 6.1 all versions, 6.0 all versions when cookie security policy is enabled may allow an attacker, under specific conditions, to retrieve the initial encrypted and signed cookie protected by the feature Una verificación de seguridad implementada incorrectamente para la vulnerabilidad estándar [CWE-3... • https://fortiguard.fortinet.com/psirt/FG-IR-22-256 • CWE-358: Improperly Implemented Security Check for Standard •
CVSS: 6.8EPSS: 0%CPEs: 7EXPL: 0CVE-2023-50181
https://notcve.org/view.php?id=CVE-2023-50181
09 Jul 2024 — An improper access control vulnerability [CWE-284] in Fortinet FortiADC version 7.4.0 through 7.4.1 and before 7.2.4 allows a read only authenticated attacker to perform some write actions via crafted HTTP or HTTPS requests. • https://fortiguard.fortinet.com/psirt/FG-IR-23-469 • CWE-284: Improper Access Control •
CVSS: 5.5EPSS: 0%CPEs: 6EXPL: 0CVE-2023-50180
https://notcve.org/view.php?id=CVE-2023-50180
14 May 2024 — An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiADC version 7.4.1 and below, version 7.2.3 and below, version 7.1.4 and below, version 7.0.5 and below, version 6.2.6 and below may allow a read-only admin to view data pertaining to other admins. Una exposición de información confidencial del sistema a una vulnerabilidad de esfera de control no autorizada [CWE-497] en FortiADC versión 7.4.1 e inferior, versión 7.2.3 e inferior, versión 7.1.4 e infe... • https://fortiguard.com/psirt/FG-IR-23-433 • CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere •