Vulnerabilities > Fortinet > Fortiwan > 5.1.1

DATE CVE VULNERABILITY TITLE RISK
2023-12-13 CVE-2023-44251 Path Traversal vulnerability in Fortinet Fortiwan
** UNSUPPORTED WHEN ASSIGNED **A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability [CWE-22] in Fortinet FortiWAN version 5.2.0 through 5.2.1 and version 5.1.1.
network
low complexity
fortinet CWE-22
8.8
2023-12-13 CVE-2023-44252 Improper Authentication vulnerability in Fortinet Fortiwan
** UNSUPPORTED WHEN ASSIGNED **An improper authentication vulnerability [CWE-287] in Fortinet FortiWAN version 5.2.0 through 5.2.1 and version 5.1.1 through 5.1.2 may allow an authenticated attacker to escalate his privileges via HTTP or HTTPs requests with crafted JWT token values.
network
low complexity
fortinet CWE-287
8.8