cve,link,title,description,vendor,products,score,severity,epss,cisa,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2022-39949,https://securityvulnerability.io/vulnerability/CVE-2022-39949,,"An improper control of a resource through its lifetime vulnerability [CWE-664] in FortiEDR CollectorWindows 4.0.0 through 4.1, 5.0.0 through 5.0.3.751, 5.1.0 may allow a privileged user to terminate the FortiEDR processes with special tools and bypass the EDR protection.",Fortinet,Fortinet Fortiedr,4.4,MEDIUM,0.0004400000034365803,false,false,false,false,,false,false,2022-11-02T00:00:00.000Z,0
CVE-2022-29057,https://securityvulnerability.io/vulnerability/CVE-2022-29057,,"A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiEDR version 5.1.0, 5.0.0 through 5.0.3 Patch 6 and 4.0.0 allows a remote authenticated attacker to perform a reflected cross site scripting attack (XSS) by injecting malicious payload into the Management Console via various endpoints.",Fortinet,Fortinet Fortiedr,5.4,MEDIUM,0.0006600000197067857,false,false,false,false,,false,false,2022-07-19T14:15:00.000Z,0
CVE-2022-23440,https://securityvulnerability.io/vulnerability/CVE-2022-23440,,"A use of hard-coded cryptographic key vulnerability [CWE-321] in the registration mechanism of FortiEDR collectors versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow a local attacker to disable and uninstall the collectors from the end-points within the same deployment.",Fortinet,Fortinet Fortiedr,7.8,HIGH,0.0004199999966658652,false,false,false,false,,false,false,2022-04-06T09:30:14.000Z,0
CVE-2022-23441,https://securityvulnerability.io/vulnerability/CVE-2022-23441,,"A use of hard-coded cryptographic key vulnerability [CWE-321] in FortiEDR versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow an unauthenticated attacker on the network to disguise as and forge messages from other collectors.",Fortinet,Fortinet Fortiedr,9.1,CRITICAL,0.002199999988079071,false,false,false,false,,false,false,2022-04-06T09:10:10.000Z,0
CVE-2022-23446,https://securityvulnerability.io/vulnerability/CVE-2022-23446,,A improper control of a resource through its lifetime in Fortinet FortiEDR version 5.0.3 and earlier allows attacker to make the whole application unresponsive via changing its root directory access permission.,Fortinet,Fortinet Fortiedr,4.4,MEDIUM,0.0004400000034365803,false,false,false,false,,false,false,2022-04-06T09:00:17.000Z,0