Skip to contentFortinet vulnerabilities
Products
Show 102 moreShow less
Newest
- fortinet fortimanager firmwareFortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote attackers to obtain...CVE-2015-36147.5 High
- fortinet fortiweb, fortinet, inc. fortinet fortiweb +1 moreAn information disclosure vulnerability in Fortinet FortiWeb 5.8.2 and below versions allows...CVE-2017-77374.9 Medium
- fortinet fortios, fortinet, inc. fortinet fortios +1 moreAn information disclosure vulnerability in Fortinet FortiOS 5.6.0, 5.4.4 and below versions...CVE-2017-31307.5 High
- fortinet fortiwlm, fortinet, inc. fortinet fortiwlm +1 moreA hard-coded account named 'upgrade' in Fortinet FortiWLM 8.3.0 and lower versions allows a...CVE-2017-73369.8 Critical
- fortinet forticlientIn FortiClientWindows 5.4.1 and 5.4.2, an attacker may escalate privilege via a...CVE-2016-84938.8 High
- fortinet fortiosA Cross-Site Scripting vulnerability in Fortinet FortiGate 5.2.0 through 5.2.10 allows attacker...CVE-2017-31276.1 Medium
- fortinet fortiportal, fortinet, inc. fortinet fortiportal +1 moreA weak password recovery vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows...CVE-2017-77317.5 High
- fortinet fortiportal, fortinet, inc. fortinet fortiportal +1 moreAn open redirect vulnerability in Fortinet FortiPortal 4.0.0 and below allows attacker to execute...CVE-2017-73436.1 Medium
- fortinet fortiportal, fortinet, inc. fortinet fortiportal +1 moreA Cross-Site Scripting vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an...CVE-2017-73396.1 Medium
- fortinet fortiportal, fortinet, inc. fortinet fortiportal +1 moreA password management vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an...CVE-2017-73387.5 High
- fortinet fortiportal, fortinet, inc. fortinet fortiportal +1 moreAn improper Access Control vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows...CVE-2017-73379.1 Critical
- fortinet fortiwlc-sd, fortinet, inc. fortinet fortiwlc-sd +1 moreAn escalation of privilege vulnerability in Fortinet FortiWLC-SD versions 8.2.4 and below allows...CVE-2017-31347.2 High
- fortinet fortiweb, fortinet, inc. fortinet fortiweb +1 moreA Cross-Site Scripting vulnerability in Fortinet FortiWeb versions 5.7.1 and below allows...CVE-2017-31296.1 Medium
- fortinet fortianalyzer firmware, fortimanager firmware, fortianalyzer, fortimanager +1 more +3 moreAn Open Redirect vulnerability in Fortinet FortiAnalyzer 5.4.0 through 5.4.2 and FortiManager 5.4...CVE-2017-31266.1 Medium
- fortinet fortiosA stored XSS (Cross-Site-Scripting) vulnerability in Fortinet FortiOS allows attackers to execute...CVE-2017-31284.8 Medium
- fortinet fortimailAn unauthenticated XSS vulnerability with FortiMail 5.0.0 - 5.2.9 and 5.3.0 - 5.3.8 could allow...CVE-2017-31256.1 Medium
- fortinet fortiosA read-only administrator on Fortinet devices with FortiOS 5.2.x before 5.2.10 GA and 5.4.x...CVE-2016-75424.9 Medium
- fortinet fortiosLong lived sessions in Fortinet FortiGate devices with FortiOS 5.x before 5.4.0 could violate a...CVE-2016-75415.9 Medium
- fortinet fortimanager, fortimanager firmware +1 moreAn improper certificate validation vulnerability in Fortinet FortiManager 5.0.6 through 5.2.7 and...CVE-2016-84957.4 High
- fortinet connectInsufficient verification of uploaded files allows attackers with webui administrators privileges...CVE-2016-84947.2 High
- fortinet fortigate, fortios +1 moreThe implementation of an ANSI X9.31 RNG in Fortinet FortiGate allows attackers to gain...CVE-2016-84925.9 Medium
- fortinet fortiwlcThe presence of a hardcoded account named 'core' in Fortinet FortiWLC allows attackers to gain...CVE-2016-84919.1 Critical
- fortinet fortianalyzer firmware, fortimanager firmware +1 moreCross-site scripting (XSS) vulnerability in the advanced settings page in Fortinet FortiManager 5...CVE-2015-73635.4 Medium
- fortinet fortiwlcFortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 allow...CVE-2016-75617.2 High
- fortinet fortiwlcThe rsyncd server in Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0,...CVE-2016-75609.8 Critical
- fortinet fortiwanCross-site scripting (XSS) vulnerability in Fortinet FortiWan (formerly AscernLink) before 4.2.5...CVE-2016-49696.1 Medium
- fortinet fortiwanThe linkreport/tmp/admin_global page in Fortinet FortiWan (formerly AscernLink) before 4.2.5...CVE-2016-49686.5 Medium
- fortinet fortiwanFortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users to obtain...CVE-2016-49676.5 Medium
- fortinet fortiwanThe diagnosis_control.php page in Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows...CVE-2016-49666.5 Medium
- fortinet fortiwanFortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users with...CVE-2016-49658.8 High
- fortinet fortiswitchFortinet FortiSwitch FSW-108D-POE, FSW-124D, FSW-124D-POE, FSW-224D-POE, FSW-224D-FPOE, FSW-248D...CVE-2016-45739.8 Critical
- fortinet fortios, fortiswitch +1 moreBuffer overflow in the Cookie parser in Fortinet FortiOS 4.x before 4.1.11, 4.2.x before 4.2.13,...CVE-2016-6909Public exploitEPSS 49.9%9.8 Critical
- fortinet fortianalyzer firmware, fortimanager firmware +1 moreCross-site scripting (XSS) vulnerability in the Web-UI in Fortinet FortiManager 5.x before 5.0.12...CVE-2016-31956.1 Medium
- fortinet fortianalyzer firmware, fortimanager firmware +1 moreCross-site scripting (XSS) vulnerability in the address added page in Fortinet FortiManager 5.x...CVE-2016-31946.1 Medium
- fortinet fortianalyzer firmware, fortimanager firmware +1 moreCross-site scripting (XSS) vulnerability in the appliance web-application in Fortinet...CVE-2016-31935.4 Medium
- fortinet fortianalyzer firmware, fortimanager firmware +1 moreCross-site scripting (XSS) vulnerability in Fortinet FortiAnalyzer 5.x before 5.0.12 and 5.2.x...CVE-2016-31965.4 Medium
- fortinet fortiwebDirectory traversal vulnerability in Fortinet FortiWeb before 5.5.3 allows remote authenticated...CVE-2016-50924.9 Medium
- fortinet fortiwebCross-site request forgery (CSRF) vulnerability in Fortinet FortiWeb before 5.5.3 allows remote...CVE-2016-40668.8 High
- fortinet fortisandbox firmwareMultiple cross-site scripting (XSS) vulnerabilities in the Web User Interface (WebUI) in Fortinet...CVE-2015-73606.1 Medium
- fortinet fortiosThe Web User Interface (WebUI) in FortiOS 5.0.x before 5.0.13, 5.2.x before 5.2.3, and 5.4.x...CVE-2016-39786.1 Medium
- fortinet fortiosFortinet FortiAnalyzer before 5.0.12 and 5.2.x before 5.2.5; FortiSwitch 3.3.x before 3.3.3;...CVE-2016-1909Public exploitEPSS 71.5%9.8 Critical
- fortinet forticlientFortinet FortiClient Linux SSLVPN before build 2313, when installed on Linux in a home directory...CVE-2015-73627.8 High
- fortinet fortimanager firmwareMultiple cross-site scripting (XSS) vulnerabilities in the Graphical User Interface (GUI) in...CVE-2015-8038Public exploit4.3 Medium
- fortinet fortimanager firmwareMultiple cross-site scripting (XSS) vulnerabilities in the Graphical User Interface (GUI) in...CVE-2015-8037Public exploit4.3 Medium
- fortinet fortiosFortiOS 5.2.3, when configured to use High Availability (HA) and the dedicated management...CVE-2015-73619.3 High
- fortinet forticlientThe (1) mdare64_48.sys, (2) mdare32_48.sys, (3) mdare32_52.sys, (4) mdare64_52.sys, and (5)...CVE-2015-57377.2 High
- fortinet forticlientThe Fortishield.sys driver in Fortinet FortiClient before 5.2.4 allows local users to execute...CVE-2015-5736Public exploit7.2 High
- fortinet forticlientThe (1) mdare64_48.sys, (2) mdare32_48.sys, (3) mdare32_52.sys, and (4) mdare64_52.sys drivers in...CVE-2015-57357.2 High
- fortinet forticlientThe (1) mdare64_48.sys, (2) mdare32_48.sys, (3) mdare32_52.sys, and (4) mdare64_52.sys drivers in...CVE-2015-4077Public exploit2.1 Low
- fortinet fortiosThe SSL-VPN feature in Fortinet FortiOS before 4.3.13 only checks the first byte of the TLS MAC...CVE-2015-59655.0 Medium
- Show moreLoading…