Skip to contentFortinet Fortios vulnerabilities
- fortinet fortiosAn improper access control [CWE-284] vulnerability in FortiOS version 7.2.0 and versions 7.0.0...CVE-2022-38380EPSS 23.0%4.3 Medium
- fortinet fortiosAn exposure of sensitive information to an unauthorized actor vulnerabiltiy [CWE-200] in FortiOS...CVE-2022-358423.7 Low
- fortinet fortiosA key management error vulnerability [CWE-320] affecting the RSA SSH host key in FortiOS 7.2.0...CVE-2022-303073.9 Low
- fortinet fortios, fortiproxy, fortiswitchmanager +2 more +4 moreAn authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version...CVE-2022-40684In KEVPublic exploitEPSS 100.0%9.8 Critical
- fortinet fortios, fortiproxy, fortios, fortiproxy +2 moreA access of uninitialized pointer in Fortinet FortiOS version 7.2.0, 7.0.0 through 7.0.5, 6.4.0...CVE-2022-290557.5 High
- fortinet fortiosA improper neutralization of special elements used in an os command ('os command injection') in...CVE-2021-441719.0 Critical
- fortinet fortiosAn improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS...CVE-2021-430804.6 Medium
- fortinet fortiosA missing cryptographic steps vulnerability [CWE-325] in the functions that encrypt the keytab...CVE-2022-290532.3 Low
- fortinet fortiosA improper verification of source of a communication channel in Fortinet FortiOS with IPS engine...CVE-2022-274916.8 Medium
- fortinet fortiosAn improper access control vulnerability [CWE-284] in FortiOS versions 6.2.0 through 6.2.11, 6.4...CVE-2022-234424.3 Medium
- fortinet fortiosAn improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79]...CVE-2022-234384.7 Medium
- fortinet fortiosAn improper certificate validation vulnerability [CWE-295] in FortiOS 6.0.0 through 6.0.14, 6.2.0...CVE-2022-223065.4 Medium
- fortinet fortios, fortiproxy, fortios, fortiproxy +2 moreA server-generated error message containing sensitive information in Fortinet FortiOS 7.0.0...CVE-2021-432064.3 Medium
- fortinet fortiosAn improper access control vulnerability [CWE-284] in FortiOS versions 6.4.8 and prior and 7.0.3...CVE-2021-410326.3 Medium
- fortinet fortiosA improper input validation in Fortinet FortiGate version 6.4.3 and below, version 6.2.5 and...CVE-2020-159362.6 Low
- fortinet fortios, fortiproxy, fortios, fortiproxy +2 moreFailure to sanitize input in the SSL VPN web portal of FortiOS 5.2.10 through 5.2.15, 5.4.0...CVE-2021-260924.7 Medium
- fortinet fortiosA download of code without integrity check vulnerability in the "execute restore src-vis" command...CVE-2021-44168In KEVPublic exploit3.3 Low
- fortinet fortiosA Hidden Functionality in Fortinet FortiOS 7.x before 7.0.1, FortiOS 6.4.x before 6.4.7 allows...CVE-2021-361694.2 Medium
- fortinet fortiosA heap-based buffer overflow in the firmware signature verification function of FortiOS versions...CVE-2021-361738.0 High
- fortinet fortiosAn integer overflow or wraparound vulnerability in the memory allocator of SSLVPN in FortiOS...CVE-2021-261098.1 High
- fortinet fortiosA use of hard-coded cryptographic key vulnerability in the SSLVPN of FortiOS before 7.0.1 may...CVE-2021-261087.5 High
- fortinet fortios, fortiproxy +1 moreA relative path traversal [CWE-23] vulnerabiltiy in FortiOS versions 7.0.0 and 7.0.1 and...CVE-2021-410247.5 High
- fortinet fortiproxy, fortios +1 moreAn insufficient verification of data authenticity vulnerability (CWE-345) in the user interface...CVE-2021-261036.3 Medium
- fortinet fortios, fortiproxy, fortios, fortiproxy +2 moreAn improper access control vulnerability [CWE-284] in FortiOS autod daemon 7.0.0, 6.4.6 and below...CVE-2021-261107.8 High
- fortinet fortiosAn exposure of sensitive information to an unauthorized actor vulnerability in FortiOS CLI 7.0.0,...CVE-2021-326005.0 Medium
- fortinet fortiosAn improper validation of certificate with host mismatch [CWE-297] vulnerability in FortiOS...CVE-2021-410193.5 Low
- fortinet fortiosA buffer underwrite vulnerability in the firmware verification routine of FortiOS before 7.0.1...CVE-2021-240184.3 Medium
- fortinet fortiosAn improper following of a certificate's chain of trust vulnerability in FortiGate versions 6.4.0...CVE-2021-240126.5 Medium
- fortinet fortiosWhen traffic other than HTTP/S (eg: SSH traffic, etc...) traverses the FortiGate in version below...CVE-2020-159384.0 Medium
- fortinet fortiosAn improper neutralization of input vulnerability in FortiGate version 6.2.x below 6.2.5 and 6.4...CVE-2020-159374.7 Medium
- fortinet fortiosAn insufficient logging vulnerability in FortiGate before 6.4.1 may allow the traffic from an...CVE-2020-128185.3 Medium
- fortinet fortiosA Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the...CVE-2019-5591In KEVPublic exploitEPSS 18.6%6.5 Medium
- fortinet fortiosAn improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and...CVE-2020-12812In KEVEPSS 45.4%9.8 Critical
- fortinet fortios, fortios and fortiproxy +1 moreA cleartext storage in a file or on disk (CWE-313) vulnerability in FortiOS SSL VPN 6.2.2 and...CVE-2019-176555.3 Medium
- fortinet fortiosAn external control of system vulnerability in FortiOS may allow an authenticated, regular user...CVE-2018-133718.8 High
- fortinet fortiosAn improper input validation vulnerability in FortiOS 6.2.1, 6.2.0, 6.0.8 and below until 5.4.0...CVE-2019-66966.1 Medium
- fortinet fortiosImproper permission or value checking in the CLI console may allow a non-privileged user to...CVE-2019-55935.5 Medium
- fortinet fortiosAn Insufficient Entropy in PRNG vulnerability in Fortinet FortiOS 6.2.1 and below for device not...CVE-2019-157037.5 High
- fortinet fortiosA reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4 under SSL...CVE-2019-55886.1 Medium
- fortinet fortiosA reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiOS 5.2.0 to 6.0.4 under SSL...CVE-2019-55866.1 Medium
- fortinet fortiosLack of root file system integrity checking in Fortinet FortiOS VM application images all...CVE-2019-55876.5 Medium
- fortinet fortiosA Host Header Redirection vulnerability in Fortinet FortiOS all versions below 6.0.5 under SSL...CVE-2018-133846.1 Medium
- fortinet fortios, fortiproxy, fortios, fortiproxy +1 more +3 moreAn Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5...CVE-2018-13382In KEVPublic exploitEPSS 81.7%9.1 Critical
- fortinet fortios, fortiproxy, fortios and fortiproxy +2 moreA buffer overflow vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4 and below...CVE-2018-133815.3 Medium
- fortinet fortios, fortiproxy, fortios, fortiproxy +2 moreAn Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet...CVE-2018-13379In KEVPublic exploitEPSS 100.0%9.1 Critical
- fortinet fortios, fortiproxy, fortios and fortiproxy +2 moreA Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5...CVE-2018-13380EPSS 62.5%4.7 Medium
- fortinet fortiosAn Information Exposure vulnerability in Fortinet FortiOS 6.0.1, 5.6.5 and below, allow attackers...CVE-2018-133655.3 Medium
- fortinet fortios, fortiproxy, fortios and fortiproxy +2 moreA heap buffer overflow in Fortinet FortiOS all versions below 6.0.5 in the SSL VPN web portal may...CVE-2018-13383In KEVEPSS 30.7%4.3 Medium
- fortinet fortiosAn information disclosure vulnerability in Fortinet FortiOS 6.0.1, 5.6.7 and below allows...CVE-2018-133665.3 Medium
- fortinet fortiadc, fortios, fortios, fortiadc +1 more +3 moreA Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6...CVE-2018-13374In KEVPublic exploitEPSS 38.1%4.3 Medium
- Show moreLoading…