High

DATE	CVE	VULNERABILITY TITLE	RISK
2023-10-10	CVE-2022-22298	OS Command Injection vulnerability in Fortinet Fortiisolator A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiIsolator version 1.0.0, FortiIsolator version 1.1.0, FortiIsolator version 1.2.0 through 1.2.2, FortiIsolator version 2.0.0 through 2.0.1, FortiIsolator version 2.1.0 through 2.1.2, FortiIsolator version 2.2.0, FortiIsolator version 2.3.0 through 2.3.4 allows attacker to execute arbitrary OS commands in the underlying shell via specially crafted input parameters. local low complexity fortinet CWE-78	7.8
2022-05-04	CVE-2021-41020	Unspecified vulnerability in Fortinet Fortiisolator 2.3.0/2.3.1/2.3.2 An improper access control vulnerability [CWE-284] in FortiIsolator versions 2.3.2 and below may allow an authenticated, non privileged attacker to regenerate the CA certificate via the regeneration URL. network low complexity fortinet	8.8