Fortiedr

fortiedr

Vendor: Fortinet • 7 CVEs

CVEs (7)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-44248 1Fortinet 1Fortiedr Jun 17, 2026 Nov 14, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 An improper access control vulnerability [CWE-284] in FortiEDRCollectorWindows version 5.2.0.4549 and below, 5.0.3.1007 and below, 4.0 all may allow a local attacker to prevent the collector service to start in the next...Show more An improper access control vulnerability [CWE-284] in FortiEDRCollectorWindows version 5.2.0.4549 and below, 5.0.3.1007 and below, 4.0 all may allow a local attacker to prevent the collector service to start in the next system reboot by tampering with some registry keys of the service.Show less
CVE-2023-33303 1Fortinet 1Fortiedr Jun 17, 2026 Oct 13, 2023 N/A· v4 8.1 HIGH· v3 N/A· v2 A insufficient session expiration in Fortinet FortiEDR version 5.0.0 through 5.0.1 allows attacker to execute unauthorized code or commands via api request
CVE-2022-39949 1Fortinet 1Fortiedr Jun 17, 2026 Nov 2, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 An improper control of a resource through its lifetime vulnerability [CWE-664] in FortiEDR CollectorWindows 4.0.0 through 4.1, 5.0.0 through 5.0.3.751, 5.1.0 may allow a privileged user to terminate the FortiEDR processe...Show more An improper control of a resource through its lifetime vulnerability [CWE-664] in FortiEDR CollectorWindows 4.0.0 through 4.1, 5.0.0 through 5.0.3.751, 5.1.0 may allow a privileged user to terminate the FortiEDR processes with special tools and bypass the EDR protection.Show less
CVE-2022-29057 1Fortinet 1Fortiedr Jun 17, 2026 Jul 19, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiEDR version 5.1.0, 5.0.0 through 5.0.3 Patch 6 and 4.0.0 allows a remote authenticated attacker to perform a reflect...Show more A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiEDR version 5.1.0, 5.0.0 through 5.0.3 Patch 6 and 4.0.0 allows a remote authenticated attacker to perform a reflected cross site scripting attack (XSS) by injecting malicious payload into the Management Console via various endpoints.Show less
CVE-2022-23440 1Fortinet 1Fortiedr Jun 17, 2026 Apr 6, 2022 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 A use of hard-coded cryptographic key vulnerability [CWE-321] in the registration mechanism of FortiEDR collectors versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow a local attacker to disable and uninstall the collectors fr...Show more A use of hard-coded cryptographic key vulnerability [CWE-321] in the registration mechanism of FortiEDR collectors versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow a local attacker to disable and uninstall the collectors from the end-points within the same deployment.Show less
CVE-2022-23446 1Fortinet 1Fortiedr Jun 17, 2026 Apr 6, 2022 N/A· v4 4.4 MEDIUM· v3 2.1 LOW· v2 A improper control of a resource through its lifetime in Fortinet FortiEDR version 5.0.3 and earlier allows attacker to make the whole application unresponsive via changing its root directory access permission.
CVE-2022-23441 1Fortinet 1Fortiedr Jun 17, 2026 Apr 6, 2022 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 A use of hard-coded cryptographic key vulnerability [CWE-321] in FortiEDR versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow an unauthenticated attacker on the network to disguise as and forge messages from other collectors.