Skip to contentFortinet Fortios vulnerabilities
- fortinet fortios, fortipam, fortiproxy +2 moreA double free vulnerability [CWE-415] in Fortinet FortiOS version 7.4.0, version 7.2.0 through 7...CVE-2023-455846.3 Medium
- fortinet fortios, siemens ruggedcom ape1808 +1 moreAn incorrect privilege assignment vulnerability [CWE-266] in FortiOS Security Fabric version 7.6...CVE-2025-537446.8 Medium
- fortinet fortiosA heap-based buffer overflow in Fortinet FortiOS versions 7.6.0 through 7.6.2, 7.4.0 through 7.4...CVE-2025-244774.0 Medium
- fortinet fortios, fortiproxy +1 moreA missing critical step in authentication vulnerability [CWE-304] in Fortinet FortiOS version 7.6...CVE-2024-529656.8 Medium
- fortinet fortios, fortiproxy, fortisase +1 more +3 moreAn Improperly Implemented Security Check for Standard vulnerability [CWE-358] in FortiOS version...CVE-2024-555994.9 Medium
- fortinet fortios, fortiproxy +1 moreA channel accessible by non-endpoint vulnerability [CWE-300] in Fortinet FortiOS version 7.4.0...CVE-2024-505685.6 Medium
- fortinet fortios, fortisase, siemens ruggedcom ape1808 +2 moreAn Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] in FortiOS...CVE-2025-252503.9 Low
- fortinet fortios, fortiproxy +1 moreAn incomplete cleanup vulnerability [CWE-459] in FortiOS 7.2 all versions and before &...CVE-2023-291843.1 Low
- fortinet fortios, fortisase, siemens ruggedcom ape1808 +2 moreAn Improper Certificate Validation vulnerability [CWE-295] in FortiOS version 7.6.1 and below,...CVE-2025-244716.0 Medium
- fortinet fortios, fortiproxy, fortiweb +2 moreAn Improper Privilege Management vulnerability [CWE-269] affecting Fortinet FortiOS version 7.6.0...CVE-2025-222546.5 Medium
- fortinet fortiosAn improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in...CVE-2025-222513.0 Low
- fortinet fortios, fortipam, fortiproxy +2 more +4 moreAn Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL-VPN version 7.6.0,...CVE-2024-50562Public exploit4.4 Medium
- fortinet fortios, fortiproxy, fortiswitchmanager +2 moreA missing authentication for critical function in Fortinet FortiProxy versions 7.6.0 through 7.6...CVE-2025-222529.0 Critical
- fortinet fortiosA integer overflow or wraparound in Fortinet FortiOS versions 7.2.0 through 7.2.7, versions 7.0.0...CVE-2025-472944.8 Medium
- fortinet fortiosA buffer over-read in Fortinet FortiOS versions 7.4.0 through 7.4.3, versions 7.2.0 through 7.2.7...CVE-2025-472953.4 Low
- fortinet fortianalyzer, fortimanager, fortios +3 more +5 moreA improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in...CVE-2024-505653.0 Low
- fortinet fortianalyzer, fortimanager, fortios +3 more +5 moreA improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in...CVE-2024-260137.1 High
- fortinet fortios, fortiproxy +1 moreMultiple issues including the use of uninitialized ressources [CWE-908] and excessive iteration ...CVE-2023-379306.7 Medium
- fortinet fortios, siemens ruggedcom ape1808 +1 moreA storing passwords in a recoverable format in Fortinet FortiOS versions 7.2.0 through 7.2.1...CVE-2024-321222.1 Low
- fortinet fortios, fortios-6k7k, fortiproxy +5 more +7 moreA buffer underwrite ('buffer underflow') vulnerability in the administrative interface of...CVE-2023-25610Public exploitEPSS 18.3%9.3 Critical
- fortinet fortiosAn improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS...CVE-2019-161514.7 Medium
- fortinet fortiosAn Improper Neutralization of Input vulnerability affecting FortiGate version 6.2.0 through 6.2.1...CVE-2019-66975.2 Medium
- fortinet fortiosAn exposure of sensitive information to an unauthorized actor vulnerability in FortiOS version 6...CVE-2020-290104.9 Medium
- fortinet fortios, fortiproxy +1 moreAn improper neutralization of input during web page generation in the SSL VPN portal of...CVE-2019-157064.0 Medium
- fortinet fortios, fortiproxy +1 moreAn improper neutralization of input during web page Generation vulnerability [CWE-79] in FortiOS...CVE-2024-260066.9 Medium
- fortinet fortios, fortipam, fortiproxy +2 more +4 moreA use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.0...CVE-2024-453247.0 High
- fortinet fortios, fortiproxy, fortios and fortiproxy +2 moreAn Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting...CVE-2025-24472In KEVPublic exploit8.1 High
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreA use of externally-controlled format string vulnerability [CWE-134] in Fortinet FortiOS version...CVE-2023-407216.3 Medium
- fortinet fortiosAn incorrect privilege assignment vulnerability [CWE-266] in Fortinet FortiOS version 7.6.0, 7.4...CVE-2024-405918.0 High
- fortinet fortiosA stack-based buffer overflow [CWE-121] vulnerability in Fortinet FortiOS version 7.2.4 through 7...CVE-2024-352797.7 High
- fortinet fortimanager, fortiadc, fortianalyzer +15 more +17 moreA externally controlled reference to a resource in another sphere in Fortinet FortiManager before...CVE-2022-234394.1 Medium
- fortinet fortiosAn out-of-bounds read vulnerability [CWE-125] in FortiOS SSLVPN web portal versions 7.4.0 through...CVE-2024-365046.2 Medium
- fortinet fortiosAn allocation of resources without limits or throttling [CWE-770] vulnerability in FortiOS...CVE-2024-466664.8 Medium
- fortinet fortios, fortiproxy +1 moreAn improper neutralization of crlf sequences in http headers ('http response splitting') in...CVE-2024-540216.4 Medium
- fortinet fortianalyzer, fortianalyzer cloud, fortimanager +3 more +5 moreA weak authentication in Fortinet FortiOS versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0...CVE-2024-488868.0 High
- fortinet fortimanager, fortimanager cloud, fortios +4 more +6 moreA improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet...CVE-2024-48884EPSS 15.2%6.7 Medium
- fortinet fortiosAn allocation of resources without limits or throttling vulnerability [CWE-770] in FortiOS...CVE-2024-466687.1 High
- fortinet fortios, fortiproxy +1 moreAn origin validation error [CWE-346] vulnerability in Fortinet FortiOS IPSec VPN version 7.4.0...CVE-2023-467154.7 Medium
- fortinet fortiosA null pointer dereference in FortiOS versions 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0 all...CVE-2023-427866.4 Medium
- fortinet fortiosA null pointer dereference in FortiOS versions 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0 all...CVE-2023-427856.4 Medium
- fortinet fortios, fortipam, fortiproxy +2 moreAn Out-of-bounds Read vulnerability [CWE-125] in FortiOS version 7.6.0, version 7.4.4 and below,...CVE-2024-466707.5 High
- fortinet fortiosAn Integer Overflow or Wraparound vulnerability [CWE-190] in version 7.4.4 and below, version 7.2...CVE-2024-466693.2 Low
- fortinet fortios, fortiproxy, fortios and fortiproxy +2 moreAn Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting...CVE-2024-55591In KEVPublic exploitEPSS 94.3%9.6 Critical
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreA out-of-bounds write in Fortinet FortiOS versions 7.6.0, 7.4.0 through 7.4.6, 7.2.0 through 7.2...CVE-2024-529633.5 Low
- fortinet fortiosAn insertion of sensitive information into sent data vulnerability [CWE-201] in FortiOS 7.6.0, 7...CVE-2024-466653.5 Low
- fortinet fortiosUnder non-default configuration, a stack-based buffer overflow in FortiOS version 6.0.10 and...CVE-2020-128205.4 Medium
- fortinet fortiosA heap-based buffer overflow vulnerability in the processing of Link Control Protocol messages in...CVE-2020-128195.4 Medium
- fortinet fortimanager, fortios, fortipam +3 more +5 moreA missing authentication for critical function in Fortinet FortiManager version 7.4.0 through 7.4...CVE-2024-260115.2 Medium
- fortinet fortios, fortiproxy +1 moreAn improper neutralization of special elements in output used by a downstream component (...CVE-2024-335103.6 Low
- fortinet fortiosA session fixation in Fortinet FortiOS version 7.4.0 through 7.4.3 and 7.2.0 through 7.2.7 and 7...CVE-2023-501764.0 Medium
- Show moreLoading…