Fortinet FortiEDR 4.0.0

CPE Details

Fortinet FortiEDR 4.0.0
fortinet
fortiedr
4.0.0
2022-04-12
17h30 +00:00
2022-04-13
09h47 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:fortinet:fortiedr:4.0.0:*:*:*:*:*:*:*

Informations

Vendor

fortinet

Product

fortiedr

Version

4.0.0

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2022-39949 2022-11-01 23h00 +00:00 An improper control of a resource through its lifetime vulnerability [CWE-664] in FortiEDR CollectorWindows 4.0.0 through 4.1, 5.0.0 through 5.0.3.751, 5.1.0 may allow a privileged user to terminate the FortiEDR processes with special tools and bypass the EDR protection.
5.5
Moyen
CVE-2022-29057 2022-07-18 14h41 +00:00 A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiEDR version 5.1.0, 5.0.0 through 5.0.3 Patch 6 and 4.0.0 allows a remote authenticated attacker to perform a reflected cross site scripting attack (XSS) by injecting malicious payload into the Management Console via various endpoints.
5.4
Moyen
CVE-2022-23440 2022-04-06 07h30 +00:00 A use of hard-coded cryptographic key vulnerability [CWE-321] in the registration mechanism of FortiEDR collectors versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow a local attacker to disable and uninstall the collectors from the end-points within the same deployment.
7.8
Haute
CVE-2022-23441 2022-04-06 07h10 +00:00 A use of hard-coded cryptographic key vulnerability [CWE-321] in FortiEDR versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow an unauthenticated attacker on the network to disguise as and forge messages from other collectors.
9.1
Critique
CVE-2022-23446 2022-04-06 07h00 +00:00 A improper control of a resource through its lifetime in Fortinet FortiEDR version 5.0.3 and earlier allows attacker to make the whole application unresponsive via changing its root directory access permission.
4.4
Moyen