VYPR

FortiTokenAndroid

by Fortinet

CVEs (3)

  • CVE-2021-22131MedJul 18, 2022
    risk 0.42cvss 6.4epss 0.00

    A improper validation of certificate with host mismatch in Fortinet FortiTokenAndroid version 5.0.3 and below, Fortinet FortiTokeniOS version 5.2.0 and below, Fortinet FortiTokenWinApp version 4.0.3 and below allows attacker to retrieve information disclosed via…

  • CVE-2026-44279MedMay 12, 2026
    risk 0.36cvss 5.5epss 0.00

    An improper export of android application components vulnerability in Fortinet FortiTokenAndroid 6.2 all versions, FortiTokenAndroid 6.1 all versions, FortiTokenAndroid 5.2 all versions may allow attacker to disclose information via an exported Content Provider URI.

  • CVE-2021-44166MedMar 2, 2022
    risk 0.27cvss 4.1epss 0.01

    An improper access control vulnerability [CWE-284 ] in FortiToken Mobile (Android) external push notification 5.1.0 and below may allow a remote attacker having already obtained a user's password to access the protected system during the 2FA procedure, even though the deny…