[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fftlNpGtZqLCQOifM3_xROG86sMYT1wQNeW_H6Ur_5Jc":3,"g5a-ex:fortinet\u002Ffortiauthenticator@*":301,"g5a-family:fortinet\u002Ffortiauthenticator":303},{"success":4,"data":5},true,{"product":6,"versions":149,"topVulnerabilitiesByEpss":215,"kevVulnerabilities":278,"seoMetadata":279,"meta":298},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":148},"fortinet","fortiauthenticator",65,21,0,"2025-12-09",[14,18,20,22,24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,57,59,61,63,65,67,69,71,73,76,78,80,82,84,86,88,90,92,94,96,98,100,102,104,106,108,110,112,114,116,118,120,122,124,126,128,130,132,134,136,138,140,142,144,146],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"3.0.0",5,false,{"version":19,"cve_count":11,"kev_count":11,"has_kev":17},"4.2.0",{"version":21,"cve_count":11,"kev_count":11,"has_kev":17},"4.2.1",{"version":23,"cve_count":11,"kev_count":11,"has_kev":17},"4.3.0",{"version":25,"cve_count":11,"kev_count":11,"has_kev":17},"4.3.1",{"version":27,"cve_count":11,"kev_count":11,"has_kev":17},"4.3.2",{"version":29,"cve_count":11,"kev_count":11,"has_kev":17},"4.3.3",{"version":31,"cve_count":11,"kev_count":11,"has_kev":17},"4.3.4",{"version":33,"cve_count":11,"kev_count":11,"has_kev":17},"5.0.0",{"version":35,"cve_count":11,"kev_count":11,"has_kev":17},"5.1.0",{"version":37,"cve_count":11,"kev_count":11,"has_kev":17},"5.1.1",{"version":39,"cve_count":11,"kev_count":11,"has_kev":17},"5.1.2",{"version":41,"cve_count":11,"kev_count":11,"has_kev":17},"5.2.0",{"version":43,"cve_count":11,"kev_count":11,"has_kev":17},"5.2.1",{"version":45,"cve_count":11,"kev_count":11,"has_kev":17},"5.2.2",{"version":47,"cve_count":11,"kev_count":11,"has_kev":17},"5.3.0",{"version":49,"cve_count":11,"kev_count":11,"has_kev":17},"5.3.1",{"version":51,"cve_count":11,"kev_count":11,"has_kev":17},"5.4.0",{"version":53,"cve_count":11,"kev_count":11,"has_kev":17},"5.4.1",{"version":55,"cve_count":56,"kev_count":11,"has_kev":17},"5.5.0",1,{"version":58,"cve_count":56,"kev_count":11,"has_kev":17},"6.0.0",{"version":60,"cve_count":11,"kev_count":11,"has_kev":17},"6.0.1",{"version":62,"cve_count":11,"kev_count":11,"has_kev":17},"6.0.2",{"version":64,"cve_count":11,"kev_count":11,"has_kev":17},"6.0.3",{"version":66,"cve_count":11,"kev_count":11,"has_kev":17},"6.0.4",{"version":68,"cve_count":11,"kev_count":11,"has_kev":17},"6.0.5",{"version":70,"cve_count":11,"kev_count":11,"has_kev":17},"6.0.6",{"version":72,"cve_count":11,"kev_count":11,"has_kev":17},"6.0.7",{"version":74,"cve_count":75,"kev_count":11,"has_kev":17},"6.1.0",2,{"version":77,"cve_count":56,"kev_count":11,"has_kev":17},"6.1.1",{"version":79,"cve_count":56,"kev_count":11,"has_kev":17},"6.1.2",{"version":81,"cve_count":56,"kev_count":11,"has_kev":17},"6.2.0",{"version":83,"cve_count":56,"kev_count":11,"has_kev":17},"6.2.1",{"version":85,"cve_count":56,"kev_count":11,"has_kev":17},"6.3.0",{"version":87,"cve_count":56,"kev_count":11,"has_kev":17},"6.3.1",{"version":89,"cve_count":56,"kev_count":11,"has_kev":17},"6.3.2",{"version":91,"cve_count":11,"kev_count":11,"has_kev":17},"6.3.3",{"version":93,"cve_count":11,"kev_count":11,"has_kev":17},"6.3.4",{"version":95,"cve_count":75,"kev_count":11,"has_kev":17},"6.4.0",{"version":97,"cve_count":11,"kev_count":11,"has_kev":17},"6.4.1",{"version":99,"cve_count":11,"kev_count":11,"has_kev":17},"6.4.10",{"version":101,"cve_count":11,"kev_count":11,"has_kev":17},"6.4.2",{"version":103,"cve_count":11,"kev_count":11,"has_kev":17},"6.4.3",{"version":105,"cve_count":11,"kev_count":11,"has_kev":17},"6.4.4",{"version":107,"cve_count":11,"kev_count":11,"has_kev":17},"6.4.5",{"version":109,"cve_count":11,"kev_count":11,"has_kev":17},"6.4.6",{"version":111,"cve_count":11,"kev_count":11,"has_kev":17},"6.4.7",{"version":113,"cve_count":11,"kev_count":11,"has_kev":17},"6.4.8",{"version":115,"cve_count":11,"kev_count":11,"has_kev":17},"6.4.9",{"version":117,"cve_count":11,"kev_count":11,"has_kev":17},"6.5.0",{"version":119,"cve_count":11,"kev_count":11,"has_kev":17},"6.5.1",{"version":121,"cve_count":11,"kev_count":11,"has_kev":17},"6.5.2",{"version":123,"cve_count":11,"kev_count":11,"has_kev":17},"6.5.3",{"version":125,"cve_count":11,"kev_count":11,"has_kev":17},"6.5.4",{"version":127,"cve_count":11,"kev_count":11,"has_kev":17},"6.5.5",{"version":129,"cve_count":11,"kev_count":11,"has_kev":17},"6.5.6",{"version":131,"cve_count":56,"kev_count":11,"has_kev":17},"6.6.0",{"version":133,"cve_count":11,"kev_count":11,"has_kev":17},"6.6.1",{"version":135,"cve_count":11,"kev_count":11,"has_kev":17},"6.6.2",{"version":137,"cve_count":11,"kev_count":11,"has_kev":17},"6.6.3",{"version":139,"cve_count":11,"kev_count":11,"has_kev":17},"6.6.4",{"version":141,"cve_count":11,"kev_count":11,"has_kev":17},"6.6.5",{"version":143,"cve_count":11,"kev_count":11,"has_kev":17},"6.6.6",{"version":145,"cve_count":11,"kev_count":11,"has_kev":17},"6.6.7",{"version":147,"cve_count":11,"kev_count":11,"has_kev":17},"6.6.8","Fortiauthenticator by Fortinet is a technology product with 65 tracked versions and 21 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":11,"kev_count":11,"has_kev":17},{"version":21,"cve_count":11,"kev_count":11,"has_kev":17},{"version":23,"cve_count":11,"kev_count":11,"has_kev":17},{"version":25,"cve_count":11,"kev_count":11,"has_kev":17},{"version":27,"cve_count":11,"kev_count":11,"has_kev":17},{"version":29,"cve_count":11,"kev_count":11,"has_kev":17},{"version":31,"cve_count":11,"kev_count":11,"has_kev":17},{"version":33,"cve_count":11,"kev_count":11,"has_kev":17},{"version":35,"cve_count":11,"kev_count":11,"has_kev":17},{"version":37,"cve_count":11,"kev_count":11,"has_kev":17},{"version":39,"cve_count":11,"kev_count":11,"has_kev":17},{"version":41,"cve_count":11,"kev_count":11,"has_kev":17},{"version":43,"cve_count":11,"kev_count":11,"has_kev":17},{"version":45,"cve_count":11,"kev_count":11,"has_kev":17},{"version":47,"cve_count":11,"kev_count":11,"has_kev":17},{"version":49,"cve_count":11,"kev_count":11,"has_kev":17},{"version":51,"cve_count":11,"kev_count":11,"has_kev":17},{"version":53,"cve_count":11,"kev_count":11,"has_kev":17},{"version":55,"cve_count":56,"kev_count":11,"has_kev":17},{"version":58,"cve_count":56,"kev_count":11,"has_kev":17},{"version":60,"cve_count":11,"kev_count":11,"has_kev":17},{"version":62,"cve_count":11,"kev_count":11,"has_kev":17},{"version":64,"cve_count":11,"kev_count":11,"has_kev":17},{"version":66,"cve_count":11,"kev_count":11,"has_kev":17},{"version":68,"cve_count":11,"kev_count":11,"has_kev":17},{"version":70,"cve_count":11,"kev_count":11,"has_kev":17},{"version":72,"cve_count":11,"kev_count":11,"has_kev":17},{"version":74,"cve_count":75,"kev_count":11,"has_kev":17},{"version":77,"cve_count":56,"kev_count":11,"has_kev":17},{"version":79,"cve_count":56,"kev_count":11,"has_kev":17},{"version":81,"cve_count":56,"kev_count":11,"has_kev":17},{"version":83,"cve_count":56,"kev_count":11,"has_kev":17},{"version":85,"cve_count":56,"kev_count":11,"has_kev":17},{"version":87,"cve_count":56,"kev_count":11,"has_kev":17},{"version":89,"cve_count":56,"kev_count":11,"has_kev":17},{"version":91,"cve_count":11,"kev_count":11,"has_kev":17},{"version":93,"cve_count":11,"kev_count":11,"has_kev":17},{"version":95,"cve_count":75,"kev_count":11,"has_kev":17},{"version":97,"cve_count":11,"kev_count":11,"has_kev":17},{"version":99,"cve_count":11,"kev_count":11,"has_kev":17},{"version":101,"cve_count":11,"kev_count":11,"has_kev":17},{"version":103,"cve_count":11,"kev_count":11,"has_kev":17},{"version":105,"cve_count":11,"kev_count":11,"has_kev":17},{"version":107,"cve_count":11,"kev_count":11,"has_kev":17},{"version":109,"cve_count":11,"kev_count":11,"has_kev":17},{"version":111,"cve_count":11,"kev_count":11,"has_kev":17},{"version":113,"cve_count":11,"kev_count":11,"has_kev":17},{"version":115,"cve_count":11,"kev_count":11,"has_kev":17},{"version":117,"cve_count":11,"kev_count":11,"has_kev":17},{"version":119,"cve_count":11,"kev_count":11,"has_kev":17},{"version":121,"cve_count":11,"kev_count":11,"has_kev":17},{"version":123,"cve_count":11,"kev_count":11,"has_kev":17},{"version":125,"cve_count":11,"kev_count":11,"has_kev":17},{"version":127,"cve_count":11,"kev_count":11,"has_kev":17},{"version":129,"cve_count":11,"kev_count":11,"has_kev":17},{"version":131,"cve_count":56,"kev_count":11,"has_kev":17},{"version":133,"cve_count":11,"kev_count":11,"has_kev":17},{"version":135,"cve_count":11,"kev_count":11,"has_kev":17},{"version":137,"cve_count":11,"kev_count":11,"has_kev":17},{"version":139,"cve_count":11,"kev_count":11,"has_kev":17},{"version":141,"cve_count":11,"kev_count":11,"has_kev":17},{"version":143,"cve_count":11,"kev_count":11,"has_kev":17},{"version":145,"cve_count":11,"kev_count":11,"has_kev":17},{"version":147,"cve_count":11,"kev_count":11,"has_kev":17},[216,224,230,237,242,248,255,260,267,272],{"cveId":217,"description":218,"publishedDate":219,"cvssScore":220,"cvssVersion":221,"severity":222,"isKev":17,"epssScore":223},"CVE-2015-1455","Fortinet FortiAuthenticator 3.0.0 has a password of (1) slony for the slony PostgreSQL user and (2) www-data for the www-data PostgreSQL user, which makes it easier for remote attackers to obtain access via unspecified vectors.","2015-02-03",7.5,"v2","High",0.02664,{"cveId":225,"description":226,"publishedDate":219,"cvssScore":227,"cvssVersion":221,"severity":228,"isKev":17,"epssScore":229},"CVE-2015-1459","Cross-site scripting (XSS) vulnerability in Fortinet FortiAuthenticator 3.0.0 allows remote attackers to inject arbitrary web script or HTML via the operation parameter to cert\u002Fscep\u002F.",4.3,"Medium",0.0203,{"cveId":231,"description":232,"publishedDate":233,"cvssScore":234,"cvssVersion":235,"severity":228,"isKev":17,"epssScore":236},"CVE-2023-26208","A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiAuthenticator 6.4.x and before allows  a remote unauthenticated attacker to partially exhaust CPU and memory via sending numerous HTTP requests to the login form.","2023-03-09",5.3,"v3.1",0.01812,{"cveId":238,"description":239,"publishedDate":219,"cvssScore":240,"cvssVersion":221,"severity":228,"isKev":17,"epssScore":241},"CVE-2015-1456","Fortinet FortiAuthenticator 3.0.0 logs the PostgreSQL usernames and passwords in cleartext, which allows remote administrators to obtain sensitive information by reading the log at debug\u002Fstartup\u002F.",4,0.01434,{"cveId":243,"description":244,"publishedDate":245,"cvssScore":246,"cvssVersion":235,"severity":228,"isKev":17,"epssScore":247},"CVE-2021-43067","A exposure of sensitive information to an unauthorized actor in Fortinet FortiAuthenticator version 6.4.0, version 6.3.2 and below, version 6.2.1 and below, version 6.1.2 and below, version 6.0.7 to 6.0.1 allows attacker to duplicate a target LDAP user 2 factors authentication token via crafted HTTP requests.","2021-12-08",6.5,0.01137,{"cveId":249,"description":250,"publishedDate":251,"cvssScore":252,"cvssVersion":221,"severity":253,"isKev":17,"epssScore":254},"CVE-2013-6990","FortiGuard FortiAuthenticator before 3.0 allows remote administrators to gain privileges via the command line interface.","2014-04-30",9,"Critical",0.01091,{"cveId":256,"description":257,"publishedDate":258,"cvssScore":220,"cvssVersion":235,"severity":222,"isKev":17,"epssScore":259},"CVE-2021-22124","An uncontrolled resource consumption (denial of service) vulnerability in the login modules of FortiSandbox 3.2.0 through 3.2.2, 3.1.0 through 3.1.4, and 3.0.0 through 3.0.6; and FortiAuthenticator before 6.0.6 may allow an unauthenticated attacker to bring the device into an unresponsive state via specifically-crafted long request parameters.","2021-08-04",0.01022,{"cveId":261,"description":262,"publishedDate":263,"cvssScore":264,"cvssVersion":265,"severity":228,"isKev":17,"epssScore":266},"CVE-2018-9186","A cross-site scripting (XSS) vulnerability in Fortinet FortiAuthenticator in versions 4.0.0 to before 5.3.0 \"CSRF validation failure\" page allows attacker to execute unauthorized script code via inject malicious scripts in HTTP referer header.","2018-05-31",6.1,"v3.0",0.00727,{"cveId":268,"description":269,"publishedDate":270,"cvssScore":264,"cvssVersion":235,"severity":228,"isKev":17,"epssScore":271},"CVE-2019-16154","An improper neutralization of input during web page generation in FortiAuthenticator WEB UI 6.0.0 may allow an unauthenticated user to perform a cross-site scripting attack (XSS) via a parameter of the logon page.","2020-01-07",0.00698,{"cveId":273,"description":274,"publishedDate":275,"cvssScore":276,"cvssVersion":235,"severity":222,"isKev":17,"epssScore":277},"CVE-2021-26116","An improper neutralization of special elements used in an OS command vulnerability in the command line interpreter of FortiAuthenticator before 6.3.1 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands.","2022-04-06",8.8,0.00623,[],{"title":280,"metaDescription":281,"keywords":282,"structuredData":283},"Fortiauthenticator by Fortinet - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Fortiauthenticator by Fortinet covering 65 versions with 21 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Fortiauthenticator vulnerabilities, Fortiauthenticator security, Fortiauthenticator CVE, Fortinet Fortiauthenticator, Fortiauthenticator threat intelligence, Fortinet security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":284,"@type":285,"name":286,"description":281,"url":287,"manufacturer":288,"applicationCategory":292,"softwareVersion":293,"mainEntity":294},"https:\u002F\u002Fschema.org","SoftwareApplication","Fortiauthenticator","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Ffortinet\u002Ffortiauthenticator",{"@type":289,"name":290,"url":291},"Organization","Fortinet","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ffortinet","Security Software","65 versions tracked",{"@type":295,"name":296,"description":297,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Fortiauthenticator Security Vulnerabilities","Security vulnerabilities affecting Fortiauthenticator by Fortinet",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":299,"apiVersion":300},"2026-10-19T01:36:14.897Z","3.0",{"rows":302,"total":11,"capped":17,"failed":11},[],[304],{"product":305,"cves":56},"fortiauthenticator_agent_for_microsoft_outlook_web_access"]