6.4.6

DATE	CVE	VULNERABILITY TITLE	RISK
2024-06-03	CVE-2024-23664	Unspecified vulnerability in Fortinet Fortiauthenticator A URL redirection to untrusted site ('open redirect') in Fortinet FortiAuthenticator version 6.6.0, version 6.5.3 and below, version 6.4.9 and below may allow an attacker to to redirect users to an arbitrary website via a crafted URL. network low complexity fortinet	6.1
2023-04-11	CVE-2022-35850	Cross-site Scripting vulnerability in Fortinet Fortiauthenticator An improper neutralization of script-related HTML tags in a web page vulnerability [CWE-80] in FortiAuthenticator versions 6.4.0 through 6.4.4, 6.3.0 through 6.3.3, all versions of 6.2 and 6.1 may allow a remote unauthenticated attacker to trigger a reflected cross site scripting (XSS) attack via the "reset-password" page. network low complexity fortinet CWE-79	6.1
2023-03-09	CVE-2023-26208	Improper Restriction of Excessive Authentication Attempts vulnerability in Fortinet Fortiauthenticator A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiAuthenticator 6.4.x and before allows a remote unauthenticated attacker to partially exhaust CPU and memory via sending numerous HTTP requests to the login form. network low complexity fortinet CWE-307	5.3