High

DATE	CVE	VULNERABILITY TITLE	RISK
2023-04-11	CVE-2023-27995	Unspecified vulnerability in Fortinet Fortisoar 7.3.0/7.3.1 A improper neutralization of special elements used in a template engine vulnerability in Fortinet FortiSOAR 7.3.0 through 7.3.1 allows an authenticated, remote attacker to execute arbitrary code via a crafted payload. network low complexity fortinet	8.8
2023-03-07	CVE-2023-25605	Unspecified vulnerability in Fortinet Fortisoar 7.3.0/7.3.1 A improper access control vulnerability in Fortinet FortiSOAR 7.3.0 - 7.3.1 allows an attacker authenticated on the administrative interface to perform unauthorized actions via crafted HTTP requests. network low complexity fortinet	7.2
2022-09-06	CVE-2022-35847	Code Injection vulnerability in Fortinet Fortisoar An improper neutralization of special elements used in a template engine vulnerability [CWE-1336] in FortiSOAR management interface 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.4 may allow a remote and authenticated attacker to execute arbitrary code via a crafted payload. network low complexity fortinet CWE-94	8.8
2022-05-04	CVE-2022-23443	Unspecified vulnerability in Fortinet Fortisoar An improper access control in Fortinet FortiSOAR before 7.2.0 allows unauthenticated attackers to access gateway API data via crafted HTTP GET requests. network low complexity fortinet	7.5