Vulnerabilities > Fortinet > Fortiadc > 6.2.6

DATE CVE VULNERABILITY TITLE RISK
2023-12-13 CVE-2023-41673 Improper Authorization vulnerability in Fortinet Fortiadc
An improper authorization vulnerability [CWE-285] in Fortinet FortiADC version 7.4.0 and before 7.2.2 may allow a low privileged user to read or backup the full system configuration via HTTP or HTTPS requests.
network
low complexity
fortinet CWE-285
5.4
2023-11-14 CVE-2023-26205 Improper Access Control vulnerability in Fortinet Fortiadc
An improper access control vulnerability [CWE-284] in FortiADC automation feature 7.1.0 through 7.1.2, 7.0 all versions, 6.2 all versions, 6.1 all versions may allow an authenticated low-privileged attacker to escalate their privileges to super_admin via a specific crafted configuration of fabric automation CLI script.
network
low complexity
fortinet CWE-284
8.8
2023-05-03 CVE-2023-27993 Path Traversal vulnerability in Fortinet Fortiadc
A relative path traversal [CWE-23] in Fortinet FortiADC version 7.2.0 and before 7.1.1 allows a privileged attacker to delete arbitrary directories from the underlying file system via crafted CLI commands.
local
low complexity
fortinet CWE-22
7.1