Skip to contentFortinet Fortios vulnerabilities
- fortinet fortios, fortiproxy +1 moreAn improper certificate validation vulnerability [CWE-295] in FortiOS 6.2 all versions, 6.4 all...CVE-2023-291754.4 Medium
- fortinet fortios, fortiproxy, fortios and fortiproxy ssl-vpn +1 more +3 moreA heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version...CVE-2023-27997In KEVPublic exploitEPSS 86.8%9.2 Critical
- fortinet fortios, fortiproxy +1 moreAn insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.2.0...CVE-2023-262073.3 Low
- fortinet fortios, fortiproxy +1 moreA out-of-bounds write in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0...CVE-2023-226396.3 Medium
- fortinet fortios, fortiproxy +1 moreA use of externally-controlled format string in Fortinet FortiOS version 7.2.0 through 7.2.4,...CVE-2022-439536.3 Medium
- fortinet fortios, fortiproxy, fortiswitchmanager +2 moreA relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.3,...CVE-2022-424746.2 Medium
- fortinet fortios, fortiproxy +1 moreA cleartext transmission of sensitive information vulnerability [CWE-319] in Fortinet FortiOS...CVE-2022-413277.6 High
- fortinet fortios, fortiproxy +1 moreA out-of-bounds write in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0...CVE-2023-226407.1 High
- fortinet fortiosA permissive list of allowed inputs vulnerability [CWE-183] in FortiGate version 7.2.3 and below,...CVE-2022-424694.1 Medium
- fortinet fortios, fortiproxy +1 moreAn improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet...CVE-2022-439474.7 Medium
- fortinet fortios, fortiproxy +1 moreA url redirection to untrusted site ('open redirect') in Fortinet FortiOS version 7.2.0 through 7...CVE-2023-226414.1 Medium
- fortinet fortios, fortiproxy +1 moreAn improper neutralization of input during web page generation vulnerability ('Cross-site...CVE-2022-413308.3 High
- fortinet fortios, fortiproxy +1 moreAn exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet...CVE-2022-413295.2 Medium
- fortinet fortios, fortiproxy +1 moreA relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2,...CVE-2022-424767.8 High
- fortinet fortios, fortiproxy +1 moreAn access of uninitialized pointer vulnerability [CWE-824] in the SSL VPN portal of Fortinet...CVE-2022-458616.4 Medium
- fortinet fortiosA improper limitation of a pathname to a restricted directory vulnerability ('path traversal') ...CVE-2022-41328In KEVEPSS 10.7%6.5 Medium
- fortinet fortios, fortiproxy +1 moreA missing cryptographic steps vulnerability [CWE-325] in the functions that encrypt the DHCP and...CVE-2022-290543.1 Low
- fortinet fortios, fortiproxy +1 moreA improper neutralization of crlf sequences in http headers ('http response splitting') in...CVE-2022-424724.0 Medium
- fortinet fortios, fortiproxy +1 moreAn improper privilege management vulnerability [CWE-269] in Fortinet FortiOS version 7.2.0 and...CVE-2022-383784.0 Medium
- fortinet fortiosAn improper neutralization of input during web page generation [CWE-79] vulnerability in FortiOS...CVE-2022-413348.6 High
- fortinet fortios, fortiproxy +1 moreAn improper certificate validation vulnerability [CWE-295] in FortiOS 7.2.0 through 7.2.3, 7.0.0...CVE-2022-399484.4 Medium
- fortinet fortios, fortiproxy, fortiswitch +1 more +3 moreAn improper verification of cryptographic signature vulnerability [CWE-347] in FortiWeb 6.4 all...CVE-2021-430744.1 Medium
- fortinet fortios, fortiproxy, fortiswitchmanager +2 moreA relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2,...CVE-2022-413358.6 High
- fortinet fortios, fortiproxy +1 moreA heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0...CVE-2022-42475In KEVPublic exploitEPSS 99.5%9.3 Critical
- fortinet fortios, fortiproxy +1 moreA improper neutralization of input during web page generation ('cross-site scripting') in...CVE-2022-406803.8 Low
- fortinet fortios, fortiproxy +1 moreAn authentication bypass by assumed-immutable data vulnerability [CWE-302] in the FortiOS SSH...CVE-2022-358437.7 High
- fortinet fortiosAn improper access control [CWE-284] vulnerability in FortiOS version 7.2.0 and versions 7.0.0...CVE-2022-38380EPSS 23.0%4.3 Medium
- fortinet fortiosAn exposure of sensitive information to an unauthorized actor vulnerabiltiy [CWE-200] in FortiOS...CVE-2022-358423.7 Low
- fortinet fortiosA key management error vulnerability [CWE-320] affecting the RSA SSH host key in FortiOS 7.2.0...CVE-2022-303073.9 Low
- fortinet fortimail, fortios, antivirus engine +1 more +3 moreAn insufficient verification of data authenticity vulnerability [CWE-345] in FortiClient,...CVE-2022-261224.7 Medium
- fortinet fortios, fortiproxy, fortiswitchmanager +2 more +4 moreAn authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version...CVE-2022-40684In KEVPublic exploitEPSS 100.0%9.8 Critical
- fortinet fortios, fortiproxy, fortios, fortiproxy +2 moreA access of uninitialized pointer in Fortinet FortiOS version 7.2.0, 7.0.0 through 7.0.5, 6.4.0...CVE-2022-290557.5 High
- fortinet fortiosA improper neutralization of special elements used in an os command ('os command injection') in...CVE-2021-441719.0 Critical
- fortinet fortiosAn improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS...CVE-2021-430804.6 Medium
- fortinet fortiosA missing cryptographic steps vulnerability [CWE-325] in the functions that encrypt the keytab...CVE-2022-290532.3 Low
- fortinet fortiosA improper verification of source of a communication channel in Fortinet FortiOS with IPS engine...CVE-2022-274916.8 Medium
- fortinet fortiadc, fortimail, fortios +2 more +4 moreA format string vulnerability [CWE-134] in the command line interpreter of FortiADC version 6.0.0...CVE-2022-222997.8 High
- fortinet fortiosAn improper access control vulnerability [CWE-284] in FortiOS versions 6.2.0 through 6.2.11, 6.4...CVE-2022-234424.3 Medium
- fortinet fortiosAn improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79]...CVE-2022-234384.7 Medium
- fortinet fortios, fortiproxy, fortiswitch +3 more +5 moreAn integer overflow / wraparound vulnerability [CWE-190] in FortiSwitch 7.0.2 and below, 6.4.9...CVE-2021-427554.3 Medium
- fortinet fortios, fortiproxy, fortiproxy, fortios +2 moreA stack-based buffer overflow vulnerability [CWE-121] in the command line interpreter of FortiOS...CVE-2021-441706.7 Medium
- fortinet fortiosAn improper certificate validation vulnerability [CWE-295] in FortiOS 6.0.0 through 6.0.14, 6.2.0...CVE-2022-223065.4 Medium
- fortinet fortiproxy, fortios +1 moreAn improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS...CVE-2021-430816.1 Medium
- fortinet fortios, fortiproxy, fortios, fortiproxy +2 moreA server-generated error message containing sensitive information in Fortinet FortiOS 7.0.0...CVE-2021-432064.3 Medium
- fortinet fortiosAn improper access control vulnerability [CWE-284] in FortiOS versions 6.4.8 and prior and 7.0.3...CVE-2021-410326.3 Medium
- fortinet fortiosA improper input validation in Fortinet FortiGate version 6.4.3 and below, version 6.2.5 and...CVE-2020-159362.6 Low
- fortinet fortios, fortiproxy, fortios, fortiproxy +2 moreFailure to sanitize input in the SSL VPN web portal of FortiOS 5.2.10 through 5.2.15, 5.4.0...CVE-2021-260924.7 Medium
- fortinet fortiosA download of code without integrity check vulnerability in the "execute restore src-vis" command...CVE-2021-44168In KEVPublic exploit3.3 Low
- fortinet fortiosA Hidden Functionality in Fortinet FortiOS 7.x before 7.0.1, FortiOS 6.4.x before 6.4.7 allows...CVE-2021-361694.2 Medium
- fortinet fortiosA heap-based buffer overflow in the firmware signature verification function of FortiOS versions...CVE-2021-361738.0 High
- Show moreLoading…