Skip to content

Fortinet Fortios vulnerabilities

fortinet fortiosA Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5...CVE-2017-141865.4 MediumNovember 29, 2017
fortinet fortiosA reflected Cross-site Scripting (XSS) vulnerability in web proxy disclaimer response web pages...CVE-2017-77396.1 MediumNovember 13, 2017
fortinet fortiosA Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiOS 5.4.0 to 5.4.5 and 5.6.0 allows a...CVE-2017-77336.1 MediumOctober 27, 2017
fortinet fortiosA Denial of Service (DoS) vulnerability in Fortinet FortiOS 5.4.0 to 5.4.5 allows an...CVE-2017-141826.5 MediumOctober 27, 2017
fortinet fortios, fortinet, inc. fortinet fortios +1 moreA Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.2.0 through 5.2.11 and 5.4.0...CVE-2017-77355.4 MediumSeptember 12, 2017
fortinet fortios, fortinet, inc. fortinet fortios +1 moreA Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 allows...CVE-2017-77345.4 MediumSeptember 12, 2017
fortinet fortios, fortinet, inc. fortinet fortios +1 moreA Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows...CVE-2017-3133Public exploitEPSS 10.7%6.1 MediumSeptember 12, 2017
fortinet fortios, fortinet, inc. fortinet fortios +1 moreA Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows...CVE-2017-3132Public exploit6.1 MediumSeptember 12, 2017
fortinet fortios, fortinet, inc. fortinet fortios +1 moreA Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 and 5.6.0...CVE-2017-3131Public exploit5.4 MediumSeptember 12, 2017
fortinet fortios, fortinet, inc. fortinet fortios +1 moreAn information disclosure vulnerability in Fortinet FortiOS 5.6.0, 5.4.4 and below versions...CVE-2017-31307.5 HighAugust 10, 2017
fortinet fortiosA Cross-Site Scripting vulnerability in Fortinet FortiGate 5.2.0 through 5.2.10 allows attacker...CVE-2017-31276.1 MediumJune 1, 2017
fortinet fortiosA stored XSS (Cross-Site-Scripting) vulnerability in Fortinet FortiOS allows attackers to execute...CVE-2017-31284.8 MediumMay 23, 2017
fortinet fortiosA read-only administrator on Fortinet devices with FortiOS 5.2.x before 5.2.10 GA and 5.4.x...CVE-2016-75424.9 MediumMarch 30, 2017
fortinet fortiosLong lived sessions in Fortinet FortiGate devices with FortiOS 5.x before 5.4.0 could violate a...CVE-2016-75415.9 MediumMarch 30, 2017
fortinet fortigate, fortios +1 moreThe implementation of an ANSI X9.31 RNG in Fortinet FortiGate allows attackers to gain...CVE-2016-84925.9 MediumFebruary 8, 2017
fortinet fortios, fortiswitch +1 moreBuffer overflow in the Cookie parser in Fortinet FortiOS 4.x before 4.1.11, 4.2.x before 4.2.13,...CVE-2016-6909Public exploitEPSS 49.9%9.8 CriticalAugust 24, 2016
fortinet fortiosThe Web User Interface (WebUI) in FortiOS 5.0.x before 5.0.13, 5.2.x before 5.2.3, and 5.4.x...CVE-2016-39786.1 MediumApril 8, 2016
fortinet fortiosFortinet FortiAnalyzer before 5.0.12 and 5.2.x before 5.2.5; FortiSwitch 3.3.x before 3.3.3;...CVE-2016-1909Public exploitEPSS 71.5%9.8 CriticalJanuary 15, 2016
fortinet fortiosFortiOS 5.2.3, when configured to use High Availability (HA) and the dedicated management...CVE-2015-73619.3 HighOctober 15, 2015
fortinet fortiosThe SSL-VPN feature in Fortinet FortiOS before 4.3.13 only checks the first byte of the TLS MAC...CVE-2015-59655.0 MediumAugust 11, 2015
fortinet fortiosCross-site scripting (XSS) vulnerability in the DHCP Monitor page in the Web User Interface ...CVE-2015-36264.3 MediumAugust 11, 2015
fortinet fortiosFortiOS 5.0.x before 5.0.12 and 5.2.x before 5.2.4 supports anonymous, export, RC4, and possibly...CVE-2015-23236.4 MediumAugust 11, 2015
fortinet fortiosCross-site scripting (XSS) vulnerability in the sslvpn login page in Fortinet FortiOS 5.2.x...CVE-2015-1880EPSS 14.2%4.3 MediumMay 12, 2015
fortinet fortiosMultiple cross-site scripting (XSS) vulnerabilities in Fortinet FortiOS 5.2.x before 5.2.3 allow...CVE-2014-86164.3 MediumMay 12, 2015
fortinet fortios** DISPUTED ** The CAPWAP DTLS protocol implementation in Fortinet FortiOS 5.0 Patch 7 build 4457...CVE-2015-1571Disputed4.3 MediumFebruary 10, 2015
fortinet fortiosThe Control and Provisioning of Wireless Access Points (CAPWAP) daemon in Fortinet FortiOS 5.0...CVE-2015-14527.8 HighFebruary 2, 2015
fortinet fortiosMultiple cross-site scripting (XSS) vulnerabilities in Fortinet FortiOS 5.0 Patch 7 build 4457...CVE-2015-14513.5 LowFebruary 2, 2015
fortinet fortiosThe FortiManager protocol service in Fortinet FortiOS before 4.3.16 and 5.x before 5.0.8 on...CVE-2014-03515.4 MediumSeptember 10, 2014
fortinet fortiosThe FortiManager protocol service in Fortinet FortiOS before 4.3.16 and 5.0.0 before 5.0.8 on...CVE-2014-22167.5 HighAugust 25, 2014
fortinet fortiosCross-site scripting (XSS) vulnerability in firewall/schedule/recurrdlg in Fortinet FortiOS 5.0.5...CVE-2013-71824.3 MediumFebruary 4, 2014
fortinet fortios, fortigate-1000c, fortigate-100d +27 more +29 moreMultiple cross-site request forgery (CSRF) vulnerabilities in Fortinet FortiOS on FortiGate...CVE-2013-1414Public exploit5.1 MediumJuly 8, 2013
fortinet fortiosFortinet FortiOS before 5.0.3 on FortiGate devices does not properly restrict Guest capabilities,...CVE-2013-46046.5 MediumJune 25, 2013
fortinet fortiosThe FTP proxy module in Fortinet FortiOS (FortiGate) before 2.80 MR12 and 3.0 MR2 allows remote...CVE-2006-32225.0 MediumJune 24, 2006
fortinet fortigate, fortios +1 moreInterpretation conflict in Fortinet FortiGate 2.8, running FortiOS 2.8MR10 and v3beta, allows...CVE-2005-3058Public exploit7.5 HighDecember 31, 2005
fortinet fortigate, fortios +1 moreThe FTP component in FortiGate 2.8 running FortiOS 2.8MR10 and v3beta, and other versions before...CVE-2005-305710.0 HighDecember 31, 2005