Fortisra
Monthly
Privilege escalation in Fortinet FortiOS, FortiProxy, FortiPAM, FortiSRA, and FortiSwitchManager allows an attacker who already holds administrative access to the management interface to trigger a heap-based buffer overflow through crafted HTTP requests and gain elevated privileges. The issue is rated CVSS 7.2 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H), making it a post-authentication escalation primitive rather than an initial-access vector. No public exploit was identified at time of analysis, and EPSS is low at 0.56% (45th percentile).
A security vulnerability in Fortinet FortiPAM 1.4.0 (CVSS 6.3) that allows attacker. Remediation should follow standard vulnerability management procedures.
Privilege escalation in Fortinet FortiOS, FortiProxy, FortiPAM, FortiSRA, and FortiSwitchManager allows an attacker who already holds administrative access to the management interface to trigger a heap-based buffer overflow through crafted HTTP requests and gain elevated privileges. The issue is rated CVSS 7.2 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H), making it a post-authentication escalation primitive rather than an initial-access vector. No public exploit was identified at time of analysis, and EPSS is low at 0.56% (45th percentile).
A security vulnerability in Fortinet FortiPAM 1.4.0 (CVSS 6.3) that allows attacker. Remediation should follow standard vulnerability management procedures.