Skip to content

Fortinet Fortiadc vulnerabilities

fortinet fortiadcA improper neutralization of script-related html tags in a web page (basic xss) vulnerability in...CVE-2025-584124.2 MediumNovember 19, 2025
fortinet fortiadcAn Out-of-bounds Write vulnerability [CWE-787] in FortiADC 8.0.0, 7.6.0 through 7.6.2, 7.4.0...CVE-2025-488396.3 MediumNovember 18, 2025
fortinet fortiadcAn exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiADC...CVE-2025-549713.9 LowNovember 18, 2025
fortinet fortiadcAn exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet...CVE-2025-599216.2 MediumOctober 14, 2025
fortinet fortiadcAn improper neutralization of special elements used in an OS Command ("OS Command Injection")...CVE-2025-498136.6 MediumAugust 12, 2025
fortinet fortiadcAn Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')...CVE-2025-311047.0 HighJune 10, 2025
fortinet fortiadcAn improper neutralization of input during web page generation ('Cross-site Scripting')...CVE-2023-379338.6 HighMarch 11, 2025
fortinet fortimanager, fortiadc, fortianalyzer +15 more +17 moreA externally controlled reference to a resource in another sphere in Fortinet FortiManager before...CVE-2022-234394.1 MediumJanuary 22, 2025
fortinet fortiadcAn improperly implemented security check for standard vulnerability [CWE-358] in FortiADC Web...CVE-2024-365113.4 LowSeptember 10, 2024
fortinet fortiadcAn improper certificate validation vulnerability [CWE-295] in FortiADC 7.4.0, 7.2.0 through 7.2.3...CVE-2023-501787.2 HighJuly 9, 2024
fortinet fortiadcAn improper access control vulnerability [CWE-284] in Fortinet FortiADC version 7.4.0 through 7...CVE-2023-501814.8 MediumJuly 9, 2024
fortinet fortiadcAn improper certificate validation vulnerability [CWE-295] in FortiADC 7.4.0, 7.2 all versions, 7...CVE-2023-501794.7 MediumJuly 9, 2024
fortinet fortiadcAn exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE...CVE-2023-501805.2 MediumMay 14, 2024
fortinet fortiadcAn improper authorization vulnerability [CWE-285] in Fortinet FortiADC version 7.4.0 and before 7...CVE-2023-416736.9 MediumDecember 13, 2023
fortinet fortiadc, fortiddos-f +1 moreA permissive cross-domain policy with untrusted domains vulnerability in Fortinet FortiADC 7.1.0 ...CVE-2023-256035.4 MediumNovember 14, 2023
fortinet fortiadc, fortiddos-f +1 moreMultiple buffer copy without checking size of input ('classic buffer overflow') vulnerabilities ...CVE-2023-291776.2 MediumNovember 14, 2023
fortinet fortiadcAn improper access control vulnerability [CWE-284] in FortiADC automation feature 7.1.0 through 7...CVE-2023-262057.9 HighNovember 14, 2023
fortinet fortiadc, fortianalyzer, fortimanager +2 moreAn improper neutralization of special elements used in an OS Command ('OS Command Injection')...CVE-2023-256077.4 HighOctober 10, 2023
fortinet fortiadcAn improper neutralization of special elements used in an OS command vulnerability [CWE-78] in...CVE-2022-358497.4 HighSeptember 13, 2023
fortinet fortiadcAn improper neutralization of special elements used in an OS command vulnerability [CWE-78] in...CVE-2023-280006.3 MediumJune 13, 2023
fortinet fortiadc, fortiadc manager, fortiadcmanager +2 moreMultiple improper neutralization of special elements used in an os command ('OS Command Injection...CVE-2023-262107.8 HighJune 13, 2023
fortinet fortiadcA relative path traversal [CWE-23] in Fortinet FortiADC version 7.2.0 and before 7.1.1 allows a...CVE-2023-279935.7 MediumMay 3, 2023
fortinet fortiadcAn improper neutralization of special elements used in an OS command vulnerability [CWE-78] in...CVE-2023-279997.6 HighMay 3, 2023
fortinet fortiadcAn improper neutralization of input during web page generation ('Cross-site Scripting')...CVE-2022-439523.3 LowApril 11, 2023
fortinet fortiadc, fortiweb +1 moreA improper neutralization of special elements used in an os command ('os command injection') in...CVE-2022-439486.5 MediumApril 11, 2023
fortinet fortiadc, fortiddos, fortiddos-f +2 moreAn improper neutralization of special elements used in an OS command vulnerability [CWE-78] in...CVE-2022-406797.1 HighApril 11, 2023
fortinet fortiadcA improper neutralization of special elements used in an os command ('os command injection') in...CVE-2022-274827.4 HighFebruary 16, 2023
fortinet fortiadcA improper neutralization of special elements used in an os command ('os command injection') in...CVE-2022-399478.6 HighJanuary 3, 2023
fortinet fortiadcAn improper neutralization of special elements used in an SQL Command ('SQL Injection')...CVE-2022-338755.1 MediumDecember 6, 2022
fortinet fortiadcMultiple instances of improper input validation vulnerability in Fortinet FortiADC version 7.1.0,...CVE-2022-338765.1 MediumDecember 6, 2022
fortinet fortiadcAn improper handling of malformed request vulnerability [CWE-228] exists in FortiADC 5.0 all...CVE-2022-383815.3 MediumNovember 2, 2022
fortinet fortiadcA improper neutralization of input during web page generation ('cross-site scripting') in...CVE-2022-38374Public exploit8.8 HighNovember 2, 2022
fortinet fortiadcAn improper neutralization of input during web page generation vulnerability [CWE-79] in FortiADC...CVE-2022-358518.0 HighNovember 2, 2022
fortinet fortiadcAn improper privilege management vulnerability [CWE-269] in FortiADC versions 6.2.1 and below, 6...CVE-2021-430766.3 MediumSeptember 6, 2022
fortinet fortiadc, fortimail, fortios +2 more +4 moreA format string vulnerability [CWE-134] in the command line interpreter of FortiADC version 6.0.0...CVE-2022-222997.8 HighAugust 5, 2022
fortinet fortiadcA unverified password change in Fortinet FortiADC version 6.2.0 through 6.2.3, 6.1.x, 6.0.x, 5.x...CVE-2022-274845.4 MediumAugust 3, 2022
fortinet fortiadcMultiple improper neutralization of special elements used in an SQL Command ('SQL Injection')...CVE-2022-261205.4 MediumJuly 18, 2022
fortinet fortiweb, fortiadc, fortiddos +7 more +9 moreMultiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2...CVE-2021-361936.3 MediumFebruary 2, 2022
fortinet fortiadc, fortimail, fortisandbox +1 more +3 moreA missing cryptographic steps vulnerability in the function that encrypts users' LDAP and RADIUS...CVE-2021-325915.3 MediumDecember 8, 2021
fortinet fortios, fortiadc, fortianalyzer +13 more +15 moreA buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0...CVE-2021-427576.3 MediumDecember 8, 2021
fortinet fortiadcA cleartext storage of sensitive information in GUI in FortiADC versions 5.4.3 and below, 6.0.0...CVE-2020-159354.3 MediumNovember 2, 2021
fortinet fortiadc, fortiadc manager, fortiadcmanager, fortiadc +2 moreA clear text storage of sensitive information into log file vulnerability in FortiADCManager 5.3...CVE-2021-240244.3 MediumApril 12, 2021
fortinet fortiadc, fortiadc firmware +1 moreAn improper authorization vulnerability in FortiADC may allow a remote authenticated user with...CVE-2020-92866.5 MediumApril 7, 2020
fortinet fortiadc, fortiadc firmware +1 moreAn improper neutralization of input vulnerability in the dashboard of FortiADC may allow an...CVE-2020-66475.4 MediumApril 7, 2020
fortinet fortiadcAn improper neutralization of input vulnerability in Fortinet FortiADC 5.3.3 and earlier may...CVE-2019-66995.4 MediumMarch 13, 2020
fortinet fortiadc, fortios, fortios, fortiadc +1 more +3 moreA Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6...CVE-2018-13374In KEVPublic exploitEPSS 38.1%4.3 MediumJanuary 22, 2019
fortinet fortiadc-1500d, fortiadc-2000d, fortiadc-200d +3 more +5 moreCross-site scripting (XSS) vulnerability in the theme login page in Fortinet FortiADC D models...CVE-2014-86184.3 MediumMay 12, 2015
fortinet coyote point equalizer, coyote point equalizer firmware, fortiadc-1000e +4 more +6 moreFortiNet FortiADC-E with firmware 3.1.1 before 4.0.5 and Coyote Point Equalizer with firmware 10...CVE-2014-85826.4 MediumNovember 1, 2014
fortinet fortiadc-1000e, fortiadc-1500d, fortiadc-2000d +6 more +8 moreCross-site scripting (XSS) vulnerability in the web administration interface in FortiADC with...CVE-2014-03314.3 MediumApril 10, 2014