CVE-2023-42791 — Vulnetix

Try Vulnetix Request Demo

CVE-2023-42791 PUBLISHED CVSS 8.600000381469727 HIGH

A relative path traversal in Fortinet FortiManager version 7.4.0 and 7.2.0 through 7.2.3 and 7.0.0 through 7.0.8 and 6.4.0 through 6.4.12 and 6.2.0 through 6.2.11 allows attacker to execute unauthorized code or commands via crafted HTTP requests.

EPSS 14.37% · 94.4th percentile

Risk Scores

CVSS v3.1

8.600000381469727

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:X

EPSS Score

14.37%

94.4th percentile

Affected Products

Vendor	Product	Versions
fortinet	fortimanager	7.4.0, 7.2.0, 7.0.0
fortinet	fortimanager	6.4.0, 7.4.0, 6.2.0
fortinet	fortianalyzer	7.0.0, 6.2.0, 6.4.0
Fortinet	FortiAnalyzer	7.4.0, 6.2.0, 6.4.0
Fortinet	FortiManager	7.2.0, 6.2.0, 6.4.0

Timeline

Feb 20, 2024 CVE Published
Feb 21, 2024 EPSS Score
Mar 18, 2024 EPSS Score
May 10, 2024 EPSS Score
Jun 5, 2024 EPSS Score
Jul 28, 2024 EPSS Score
Aug 2, 2024 CVE Updated
Aug 23, 2024 EPSS Score
Sep 18, 2024 EPSS Score
Nov 10, 2024 EPSS Score
Dec 7, 2024 EPSS Score
Jan 29, 2025 EPSS Score

References

Open in Interactive Console →