CVE-2018-1355: An open redirect vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions, FortiAnalyzer 6.0....

Security readout for executives and security teams

CVE-2018-1355 affects Fortinet FortiManager and FortiAnalyzer. An attacker may trick an authenticated user into creating a FortiView PDF that contains attacker-controlled malicious URLs. The available evidence points to social engineering risk rather than direct unauthenticated compromise. Exposure is most likely where affected FortiManager or FortiAnalyzer versions are still deployed and authenticated users generate FortiView PDF reports. Administrative interfaces reachable by broad internal populations increase business risk. Treat as a controlled but real phishing-enablement risk. Prioritize if affected appliances remain in production, admins rely on PDF reporting, or management systems are broadly reachable internally. Mitigation focus: Review Fortinet advisory FG-IR-18-022 for vendor-confirmed fixed versions or mitigations.; Inventory FortiManager and FortiAnalyzer deployments for affected version ranges.; Limit management interface access to trusted administrative networks and users..

Prepared

Jun 7, 2026, 06:24 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.