FortiAIOps vulnerabilities

2 known vulnerabilities in FortiAIOps from Fortinet. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  FortiAIOps: Cross-Site Request Forgery

  CVE-2024-27783Jul 9, 2024Fortinet

  Multiple cross-site request forgery (CSRF) weaknesses [CWE-352] vulnerability in Fortinet FortiAIOps 2.0.0 may allow an unauthenticated remote attacker to perform arbitrary actions on behalf of an authenticated user via tricking the victim to execute malicious

• 9.8 Critical severity

  Multiple insufficient session expiration weaknesses [CWE-613] vulnerability in Fortinet…

  CVE-2024-27782Jul 9, 2024Fortinet

  Multiple insufficient session expiration weaknesses [CWE-613] vulnerability in Fortinet FortiAIOps 2.0.0 may allow an attacker to re-use stolen old session tokens to perform unauthorized operations via crafted requests.