Not rated
CVE-2019-15710 An OS command injection vulnerability in FortiExtender 4.1.0 to 4.1.1, 4.0.0 and below under CLI admin console may allow…
Description
An OS command injection vulnerability in FortiExtender 4.1.0 to 4.1.1, 4.0.0 and below under CLI admin console may allow unauthorized administrators to run arbitrary system level commands via specially crafted "execute date" commands.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiExtender | Versions not published |
Other CVEs of FortiExtender
The 7 CVEs of FortiExtender →
CVE-2025-64153
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiExtender…
6.7
Medium
CVE-2025-46775
A debug messages revealing unnecessary information vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1,…
5.2
Medium
CVE-2025-46776
A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiExtender 7.6.0…
6.3
Medium
CVE-2024-23663
An improper access control in Fortinet FortiExtender 4.1.1 - 4.1.9, 4.2.0 - 4.2.6, 5.3.2, 7.0.0 - 7.0.4, 7.2.0 - 7.2.4…
8.1
High