Fortinet Fortinet FortiEDR
5 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-39949 | FortiEDR CollectorWindows 4.0.0 through 4.1, 5.0.0 through 5.0.3.751, 5.1.0 | An improper control of a resource through its lifetime vulnerability [CWE-664] in FortiEDR CollectorWindows 4.0.0 through 4.1, 5.0.0 through | MEDIUM 5.5 | 0.2 % | ||
| CVE-2022-29057 | FortiEDR 5.0.3, 5.0.2, 5.0.1, 5.0.0, 4.0.0 | A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiEDR version 5.1.0, 5.0.0 through 5.0 | MEDIUM 5.4 | 0.6 % | ||
| CVE-2022-23440 | FortiEDR 5.0.2, 5.0.1, 5.0.0, 4.0.0 | A use of hard-coded cryptographic key vulnerability [CWE-321] in the registration mechanism of FortiEDR collectors versions 5.0.2, 5.0.1, 5. | HIGH 7.8 | 0.2 % | ||
| CVE-2022-23441 | FortiEDR 5.0.2, 5.0.1, 5.0.0, 4.0.0 | A use of hard-coded cryptographic key vulnerability [CWE-321] in FortiEDR versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow an unauthenticated a | CRITICAL 9.1 | 0.9 % | ||
| CVE-2022-23446 | FortiEDR 5.0.2, 5.0.1, 5.0.0, 4.0.0 | A improper control of a resource through its lifetime in Fortinet FortiEDR version 5.0.3 and earlier allows attacker to make the whole appli | MEDIUM 4.4 | 0.2 % |