CVSS: 10.0EPSS: 0%CPEs: 18EXPL: 0CVE-2022-27488
https://notcve.org/view.php?id=CVE-2022-27488
13 Dec 2023 — A cross-site request forgery (CSRF) in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x, FortiSwitch version 7.0.0 through 7.0.4, 6.4.0 through 6.4.10, 6.2.0 through 6.2.7, 6.0.x, FortiMail version 7.0.0 through 7.0.3, 6.4.0 through 6.4.6, 6.2.x, 6.0.x FortiRecorder version 6.4.0 through 6.4.2, 6.0.x, 2.7.x, 2.6.x, FortiNDR version 1.x.x allows a remote unauthenticated attacker to execute commands on the CLI via tricking an authenticated administrator to execute malicious GET requests. Cross-Site Request ... • https://fortiguard.com/psirt/FG-IR-22-038 • CWE-352: Cross-Site Request Forgery (CSRF) •
CVSS: 9.0EPSS: 0%CPEs: 2EXPL: 0CVE-2021-24023
https://notcve.org/view.php?id=CVE-2021-24023
03 Jun 2021 — An improper input validation in FortiAI v1.4.0 and earlier may allow an authenticated user to gain system shell access via a malicious payload in the "diagnose" command. Una comprobación de entrada inapropiada en FortiAI versión v1.4.0 y anteriores puede permitir a un usuario autenticado conseguir acceso al shell del sistema por medio de una carga útil maliciosa en el comando "diagnose" • https://fortiguard.com/advisory/FG-IR-21-033 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •