Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Fortinet

Fortinet vulnerabilities

Products

Show 102 moreShow less

Newest

Known exploitedIn KEVPublic exploitFix available

fortinet fortiosCross-site scripting (XSS) vulnerability in the DHCP Monitor page in the Web User Interface ...CVE-2015-36264.3 MediumAugust 11, 2015
fortinet fortiosFortiOS 5.0.x before 5.0.12 and 5.2.x before 5.2.4 supports anonymous, export, RC4, and possibly...CVE-2015-23236.4 MediumAugust 11, 2015
fortinet fortianalyzer firmware, fortimanager firmware +1 moreCross-site scripting (XSS) vulnerability in the advanced dataset reports page in Fortinet...CVE-2015-36204.3 MediumMay 12, 2015
fortinet fortiosCross-site scripting (XSS) vulnerability in the sslvpn login page in Fortinet FortiOS 5.2.x...CVE-2015-1880EPSS 14.2%4.3 MediumMay 12, 2015
fortinet fortiwebCross-site scripting (XSS) vulnerability in the autolearn configuration page in Fortinet FortiWeb...CVE-2014-86194.3 MediumMay 12, 2015
fortinet fortiadc-1500d, fortiadc-2000d, fortiadc-200d +3 more +5 moreCross-site scripting (XSS) vulnerability in the theme login page in Fortinet FortiADC D models...CVE-2014-86184.3 MediumMay 12, 2015
fortinet fortiosMultiple cross-site scripting (XSS) vulnerabilities in Fortinet FortiOS 5.2.x before 5.2.3 allow...CVE-2014-86164.3 MediumMay 12, 2015
fortinet fortimailFortiMail 5.0.3 through 5.2.3 allows remote administrators to obtain credentials via the "diag...CVE-2015-32934.0 MediumApril 14, 2015
fortinet single sign onStack-based buffer overflow in collectoragent.exe in Fortinet Single Sign On (FSSO) before build...CVE-2015-2281Public exploitEPSS 10.3%7.5 HighMarch 19, 2015
fortinet fortimailCross-site scripting (XSS) vulnerability in the Web Action Quarantine Release feature in the...CVE-2014-86174.3 MediumMarch 4, 2015
fortinet fortios** DISPUTED ** The CAPWAP DTLS protocol implementation in Fortinet FortiOS 5.0 Patch 7 build 4457...CVE-2015-1571Disputed4.3 MediumFebruary 10, 2015
fortinet forticlientThe Endpoint Control protocol implementation in Fortinet FortiClient 5.2.3.091 for Android and 5...CVE-2015-15704.3 MediumFebruary 10, 2015
fortinet forticlientFortinet FortiClient 5.2.028 for iOS does not validate certificates, which makes it easier for...CVE-2015-15694.3 MediumFebruary 10, 2015
fortinet fortiauthenticatorCross-site scripting (XSS) vulnerability in Fortinet FortiAuthenticator 3.0.0 allows remote...CVE-2015-14594.3 MediumFebruary 3, 2015
fortinet fortiauthenticatorFortinet FortiAuthenticator 3.0.0 allows local users to bypass intended restrictions and gain...CVE-2015-14586.9 MediumFebruary 3, 2015
fortinet fortiauthenticatorFortinet FortiAuthenticator 3.0.0 allows local users to read arbitrary files via the -f flag to...CVE-2015-14574.9 MediumFebruary 3, 2015
fortinet fortiauthenticatorFortinet FortiAuthenticator 3.0.0 logs the PostgreSQL usernames and passwords in cleartext, which...CVE-2015-14564.0 MediumFebruary 3, 2015
fortinet fortiauthenticatorFortinet FortiAuthenticator 3.0.0 has a password of (1) slony for the slony PostgreSQL user and ...CVE-2015-14557.5 HighFebruary 3, 2015
fortinet forticlientThe qm class in Fortinet FortiClient 5.2.3.091 for Android uses a hardcoded encryption key of...CVE-2015-14535.0 MediumFebruary 2, 2015
fortinet fortiosThe Control and Provisioning of Wireless Access Points (CAPWAP) daemon in Fortinet FortiOS 5.0...CVE-2015-14527.8 HighFebruary 2, 2015
fortinet fortiosMultiple cross-site scripting (XSS) vulnerabilities in Fortinet FortiOS 5.0 Patch 7 build 4457...CVE-2015-14513.5 LowFebruary 2, 2015
fortinet coyote point equalizer, coyote point equalizer firmware, fortiadc-1000e +4 more +6 moreFortiNet FortiADC-E with firmware 3.1.1 before 4.0.5 and Coyote Point Equalizer with firmware 10...CVE-2014-85826.4 MediumNovember 1, 2014
fortinet fortimanager, fortianalyzer firmware +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet...CVE-2014-23364.3 MediumOctober 31, 2014
fortinet fortianalyzer firmwareMultiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet...CVE-2014-23354.3 MediumOctober 31, 2014
fortinet fortianalyzer firmwareMultiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet...CVE-2014-23344.3 MediumOctober 31, 2014
fortinet fortiosThe FortiManager protocol service in Fortinet FortiOS before 4.3.16 and 5.x before 5.0.8 on...CVE-2014-03515.4 MediumSeptember 10, 2014
fortinet fortiosThe FortiManager protocol service in Fortinet FortiOS before 4.3.16 and 5.0.0 before 5.0.8 on...CVE-2014-22167.5 HighAugust 25, 2014
fortinet fortiwebMultiple cross-site scripting (XSS) vulnerabilities in FortiGuard FortiWeb 5.0.x, 5.1.x, and 5.2...CVE-2014-47384.3 MediumJuly 11, 2014
fortinet fortiwebMultiple cross-site request forgery (CSRF) vulnerabilities in the web administration console in...CVE-2014-31156.8 MediumMay 8, 2014
fortinet fortiwebFortiGuard FortiWeb before 5.0.3 allows remote authenticated users to gain privileges via...CVE-2014-19576.5 MediumApril 30, 2014
fortinet fortiwebCRLF injection vulnerability in FortiGuard FortiWeb before 5.0.3 allows remote attackers to...CVE-2014-19565.0 MediumApril 30, 2014
fortinet fortiwebCross-site scripting (XSS) vulnerability in FortiGuard FortiWeb before 5.0.3 allows remote...CVE-2014-19554.3 MediumApril 30, 2014
fortinet fortiauthenticatorFortiGuard FortiAuthenticator before 3.0 allows remote administrators to gain privileges via the...CVE-2013-69909.0 HighApril 30, 2014
fortinet fortiadc-1000e, fortiadc-1500d, fortiadc-2000d +6 more +8 moreCross-site scripting (XSS) vulnerability in the web administration interface in FortiADC with...CVE-2014-03314.3 MediumApril 10, 2014
fortinet fortiwebCross-site scripting (XSS) vulnerability in the web administration interface in FortiGuard...CVE-2014-14583.5 LowFebruary 4, 2014
fortinet fortiosCross-site scripting (XSS) vulnerability in firewall/schedule/recurrdlg in Fortinet FortiOS 5.0.5...CVE-2013-71824.3 MediumFebruary 4, 2014
fortinet fortiwebCross-site scripting (XSS) vulnerability in user/ldap_user/add in Fortinet FortiOS 5.0.3 allows...CVE-2013-71814.3 MediumFebruary 4, 2014
fortinet fortianalyzer-1000d, fortianalyzer-2000b, fortianalyzer-200d +4 more +6 morecgi-bin/module//sysmanager/admin/SYSAdminUserDialog in Fortinet FortiAnalyzer before 5.0.5 does...CVE-2013-6826Public exploit6.8 MediumNovember 19, 2013
fortinet fortios, fortigate-1000c, fortigate-100d +27 more +29 moreMultiple cross-site request forgery (CSRF) vulnerabilities in Fortinet FortiOS on FortiGate...CVE-2013-1414Public exploit5.1 MediumJuly 8, 2013
fortinet forticlient, forticlient lite, forticlient ssl vpn +2 moreFortiClient before 4.3.5.472 on Windows, before 4.0.3.134 on Mac OS X, and before 4.0 on Android;...CVE-2013-46695.4 MediumJune 25, 2013
fortinet fortiosFortinet FortiOS before 5.0.3 on FortiGate devices does not properly restrict Guest capabilities,...CVE-2013-46046.5 MediumJune 25, 2013
fortinet fortimailMultiple cross-site scripting (XSS) vulnerabilities in admin/FEAdmin.html in Fortinet FortiMail...CVE-2013-1471Public exploit4.3 MediumFebruary 4, 2013
fortinet fortigate-1000c, fortigate-100d, fortigate-110c +26 more +28 moreThe default configuration of Fortinet Fortigate UTM appliances uses the same Certification...CVE-2012-49485.3 MediumNovember 14, 2012
ahnlab v3 internet security, aladdin esafe, avg anti-virus +5 more +7 moreThe ZIP file parser in AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190,...CVE-2012-1462EPSS 97.2%4.3 MediumMarch 21, 2012
anti-virus vba32, authentium command antivirus, avg anti-virus +12 more +14 moreThe Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5,...CVE-2012-1461EPSS 98.2%4.3 MediumMarch 21, 2012
ahnlab v3 internet security, anti-virus vba32, antiy avl sdk +22 more +24 moreThe TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy...CVE-2012-1459Fix availableEPSS 100.0%4.3 MediumMarch 21, 2012
aladdin esafe, avg anti-virus, cat quick heal +12 more +14 moreThe TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo...CVE-2012-1456EPSS 99.9%4.3 MediumMarch 21, 2012
aladdin esafe, fortinet antivirus, mcafee gateway +3 more +5 moreThe ELF file parser in Dr.Web 5.0.2.03300, eSafe 7.0.17.0, McAfee Gateway (formerly Webwasher)...CVE-2012-1454EPSS 87.5%4.3 MediumMarch 21, 2012
antiy avl sdk, ca etrust vet antivirus, emsisoft anti-malware +10 more +12 moreThe CAB file parser in Dr.Web 5.0.2.03300, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti...CVE-2012-1453EPSS 97.5%4.3 MediumMarch 21, 2012
aladdin esafe, fortinet antivirus, pandasecurity panda antivirus +1 more +3 moreThe ELF file parser in Fortinet Antivirus 4.2.254.0, eSafe 7.0.17.0, Dr.Web 5.0.2.03300, and...CVE-2012-1447EPSS 66.1%4.3 MediumMarch 21, 2012
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open