Skip to contentFortinet Fortios vulnerabilities
- fortinet fortiosAn integer overflow or wraparound vulnerability in the memory allocator of SSLVPN in FortiOS...CVE-2021-261098.1 High
- fortinet fortiosA use of hard-coded cryptographic key vulnerability in the SSLVPN of FortiOS before 7.0.1 may...CVE-2021-261087.5 High
- fortinet fortios, fortiproxy +1 moreA relative path traversal [CWE-23] vulnerabiltiy in FortiOS versions 7.0.0 and 7.0.1 and...CVE-2021-410247.5 High
- fortinet fortiproxy, fortios +1 moreAn insufficient verification of data authenticity vulnerability (CWE-345) in the user interface...CVE-2021-261036.3 Medium
- fortinet fortios, fortiadc, fortianalyzer +13 more +15 moreA buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0...CVE-2021-427576.3 Medium
- fortinet fortios, fortiproxy, fortios, fortiproxy +2 moreAn improper access control vulnerability [CWE-284] in FortiOS autod daemon 7.0.0, 6.4.6 and below...CVE-2021-261107.8 High
- fortinet fortiosAn exposure of sensitive information to an unauthorized actor vulnerability in FortiOS CLI 7.0.0,...CVE-2021-326005.0 Medium
- fortinet fortiosAn improper validation of certificate with host mismatch [CWE-297] vulnerability in FortiOS...CVE-2021-410193.5 Low
- fortinet fortiosA buffer underwrite vulnerability in the firmware verification routine of FortiOS before 7.0.1...CVE-2021-240184.3 Medium
- fortinet fortiosAn improper following of a certificate's chain of trust vulnerability in FortiGate versions 6.4.0...CVE-2021-240126.5 Medium
- fortinet fortios, fortiproxy, fortiproxy, fortios +2 moreA Stack-based Buffer Overflow vulnerability in the HTTPD daemon of FortiOS 6.0.10 and below, 6.2...CVE-2019-176565.4 Medium
- fortinet fortiosWhen traffic other than HTTP/S (eg: SSH traffic, etc...) traverses the FortiGate in version below...CVE-2020-159384.0 Medium
- fortinet fortiosAn improper neutralization of input vulnerability in FortiGate version 6.2.x below 6.2.5 and 6.4...CVE-2020-159374.7 Medium
- fortinet fortios, fortiproxy, fortigate and fortiproxy +2 moreA cleartext storage of sensitive information vulnerability in FortiOS command line interface in...CVE-2020-66485.3 Medium
- fortinet fortiosAn insufficient logging vulnerability in FortiGate before 6.4.1 may allow the traffic from an...CVE-2020-128185.3 Medium
- fortinet fortiosA Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the...CVE-2019-5591In KEVPublic exploitEPSS 18.6%6.5 Medium
- fortinet fortiosAn improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and...CVE-2020-12812In KEVEPSS 45.4%9.8 Critical
- fortinet fortios, fortios and fortiproxy +1 moreA cleartext storage in a file or on disk (CWE-313) vulnerability in FortiOS SSL VPN 6.2.2 and...CVE-2019-176555.3 Medium
- fortinet fortiosAn external control of system vulnerability in FortiOS may allow an authenticated, regular user...CVE-2018-133718.8 High
- fortinet fortiosAn improper input validation vulnerability in FortiOS 6.2.1, 6.2.0, 6.0.8 and below until 5.4.0...CVE-2019-66966.1 Medium
- fortinet fortiosImproper permission or value checking in the CLI console may allow a non-privileged user to...CVE-2019-55935.5 Medium
- fortinet fortios, fortigate +1 moreAn Improper Input Validation vulnerability in the SSL VPN portal of FortiOS versions 6.2.1 and...CVE-2019-157057.5 High
- fortinet fortios, fortigate +1 moreUse of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup...CVE-2019-6693In KEVPublic exploit6.5 Medium
- fortinet forticlient, forticlient for mac os, forticlient for windows +1 more +3 moreUse of a hardcoded cryptographic key in the FortiGuard services communication protocol may allow...CVE-2018-91955.9 Medium
- fortinet fortiosAn Insufficient Entropy in PRNG vulnerability in Fortinet FortiOS 6.2.1 and below for device not...CVE-2019-157037.5 High
- fortinet fortiosAn information exposure vulnerability in FortiOS 6.2.0 and below may allow an unauthenticated...CVE-2018-133675.3 Medium
- fortinet fortios ips engineMultiple padding oracle vulnerabilities (Zombie POODLE, GOLDENDOODLE, OpenSSL 0-length) in the...CVE-2019-55925.9 Medium
- fortinet fortiosA reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4 under SSL...CVE-2019-55886.1 Medium
- fortinet fortiosA reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiOS 5.2.0 to 6.0.4 under SSL...CVE-2019-55866.1 Medium
- fortinet fortiosLack of root file system integrity checking in Fortinet FortiOS VM application images all...CVE-2019-55876.5 Medium
- fortinet fortiosA Host Header Redirection vulnerability in Fortinet FortiOS all versions below 6.0.5 under SSL...CVE-2018-133846.1 Medium
- fortinet fortios, fortiproxy, fortios, fortiproxy +1 more +3 moreAn Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5...CVE-2018-13382In KEVPublic exploitEPSS 81.7%9.1 Critical
- fortinet fortios, fortiproxy, fortios and fortiproxy +2 moreA buffer overflow vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4 and below...CVE-2018-133815.3 Medium
- fortinet fortios, fortiproxy, fortios, fortiproxy +2 moreAn Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet...CVE-2018-13379In KEVPublic exploitEPSS 100.0%9.1 Critical
- fortinet fortios, fortiproxy, fortios and fortiproxy +2 moreA Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5...CVE-2018-13380EPSS 62.5%4.7 Medium
- fortinet fortiosAn Information Exposure vulnerability in Fortinet FortiOS 6.0.1, 5.6.5 and below, allow attackers...CVE-2018-133655.3 Medium
- fortinet fortios, fortiproxy, fortios and fortiproxy +2 moreA heap buffer overflow in Fortinet FortiOS all versions below 6.0.5 in the SSL VPN web portal may...CVE-2018-13383In KEVEPSS 30.7%4.3 Medium
- fortinet fortiosAn information disclosure vulnerability in Fortinet FortiOS 6.0.1, 5.6.7 and below allows...CVE-2018-133665.3 Medium
- fortinet fortiosA privilege escalation vulnerability in Fortinet FortiOS 6.0.0 to 6.0.6, 5.6.0 to 5.6.10, 5.4 and...CVE-2017-175447.2 High
- fortinet fortiosA format string vulnerability in Fortinet FortiOS 5.6.0 allows attacker to execute unauthorized...CVE-2018-13529.8 Critical
- fortinet fortiadc, fortios, fortios, fortiadc +1 more +3 moreA Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6...CVE-2018-13374In KEVPublic exploitEPSS 38.1%4.3 Medium
- fortinet fortios, fortinet, inc. fortinet fortios +1 moreAn uninitialized memory buffer leak exists in Fortinet FortiOS 5.6.1 to 5.6.3, 5.4.6 to 5.4.7, 5...CVE-2018-133767.5 High
- fortinet fortiosA plaintext recovery of encrypted messages or a Man-in-the-middle (MiTM) attack on RSA PKCS #1 v1...CVE-2018-91945.9 Medium
- fortinet fortiosA plaintext recovery of encrypted messages or a Man-in-the-middle (MiTM) attack on RSA PKCS #1 v1...CVE-2018-91925.9 Medium
- fortinet fortiosAn information disclosure vulnerability in Fortinet FortiOS 6.0.0 and below versions reveals user...CVE-2018-91858.1 High
- fortinet fortiosAn Information Disclosure vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8 and 5...CVE-2017-141855.3 Medium
- fortinet fortiosA local privilege escalation and local code execution vulnerability in Fortinet FortiOS 5.6.0 to...CVE-2017-14187Public exploit6.2 Medium
- fortinet fortiosMultiple cross-site scripting (XSS) vulnerabilities in Fortinet FortiGate UTM WAF appliances with...CVE-2012-09416.1 Medium
- fortinet fortiosA Cross-site Scripting vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.7, 5.2 and...CVE-2017-141906.1 Medium
- fortinet fortiosAn Information Disclosure vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.5, 5.2...CVE-2017-77387.2 High
- Show moreLoading…