Skip to contentFortinet vulnerabilities
Products
Show 102 moreShow less
Newest
- fortinet fortiwebAn Improper Neutralization of Input vulnerability in the Anomaly Detection Parameter Name in...CVE-2019-161566.1 Medium
- fortinet forticlient, forticlientlinux +1 moreA privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow a user...CVE-2019-161557.1 High
- fortinet forticlient, forticlientlinux +1 moreA Denial of service (DoS) vulnerability in FortiClient for Linux 6.2.1 and below may allow an...CVE-2019-161526.5 Medium
- fortinet forticlient, forticlientlinux +1 moreA stack buffer overflow vulnerability in FortiClient for Linux 6.2.1 and below may allow a user...CVE-2019-176526.5 Medium
- fortinet forticlient, forticlientlinux +1 moreA privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow an user...CVE-2019-157117.8 High
- fortinet fortimanagerA vulnerability exists in in FortiManager 5.2.1 and earlier and 5.0.10 and earlier in the WebUI...CVE-2015-36139.8 Critical
- fortinet fortimanagerA Cross-site Scripting (XSS) vulnerability exists in FortiManager 5.2.1 and earlier and 5.0.10...CVE-2015-36125.4 Medium
- fortinet fortimanagerA Command Injection vulnerability exists in FortiManager 5.2.1 and earlier and FortiManager 5.0...CVE-2015-36118.8 High
- fortinet fortisiemAn Improper Neutralization of Input vulnerability in the description and title parameters of a...CVE-2019-176515.4 Medium
- fortinet fortimailAn improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10...CVE-2019-15707Public exploit4.9 Medium
- fortinet fortimailAn improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10...CVE-2019-157127.2 High
- fortinet fortiosImproper permission or value checking in the CLI console may allow a non-privileged user to...CVE-2019-55935.5 Medium
- fortinet fortisiemA hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5...CVE-2019-161539.8 Critical
- fortinet fortiauthenticator, fortiauthenticator web ui +1 moreAn improper neutralization of input during web page generation in FortiAuthenticator WEB UI 6.0.0...CVE-2019-161546.1 Medium
- fortinet fortisiemAn information exposure vulnerability in the external authentication profile form of FortiSIEM 5...CVE-2019-67006.5 Medium
- fortinet fortios, fortigate +1 moreAn Improper Input Validation vulnerability in the SSL VPN portal of FortiOS versions 6.2.1 and...CVE-2019-157057.5 High
- fortinet fortios, fortigate +1 moreUse of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup...CVE-2019-6693In KEVPublic exploit6.5 Medium
- fortinet forticlient, forticlient for mac os +1 moreAn Improper Neutralization of Special Elements used in a Command vulnerability in one of...CVE-2019-176507.8 High
- fortinet forticlient, forticlient for mac os, forticlient for windows +1 more +3 moreUse of a hardcoded cryptographic key in the FortiGuard services communication protocol may allow...CVE-2018-91955.9 Medium
- fortinet forticlient, forticlient for mac os +1 moreA clear text storage of sensitive information vulnerability in FortiClient for Mac may allow a...CVE-2019-157045.5 Medium
- fortinet fortiextender, fortiguard fortiextender firmware +1 moreAn OS command injection vulnerability in FortiExtender 4.1.1 and below under CLI admin console...CVE-2019-157107.2 High
- fortinet fortiosAn Insufficient Entropy in PRNG vulnerability in Fortinet FortiOS 6.2.1 and below for device not...CVE-2019-157037.5 High
- fortinet forticlient, forticlient for windows +1 moreA malicious DLL preload vulnerability in Fortinet FortiClient for Windows 6.2.0 and below allows...CVE-2019-66927.8 High
- fortinet fortiwebThe URL part of the report message is not encoded in Fortinet FortiWeb 6.0.2 and below which may...CVE-2019-55906.1 Medium
- fortinet fortinacAn Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") in...CVE-2019-55946.1 Medium
- fortinet fortimanagerLack of root file system integrity checking in Fortinet FortiManager VM application images of all...CVE-2019-66959.8 Critical
- fortinet fortiosAn information exposure vulnerability in FortiOS 6.2.0 and below may allow an unauthenticated...CVE-2018-133675.3 Medium
- fortinet fortirecorder, fortirecorder firmware +1 moreUse of Hard-coded Credentials vulnerability in FortiRecorder all versions below 2.7.4 may allow...CVE-2019-66989.8 Critical
- fortinet fortios ips engineMultiple padding oracle vulnerabilities (Zombie POODLE, GOLDENDOODLE, OpenSSL 0-length) in the...CVE-2019-55925.9 Medium
- fortinet fcm-mb40 firmware/usr/sbin/default.sh and /usr/apache/htdocs/cgi-bin/admin/hardfactorydefault.cgi on Dynacolor FCM...CVE-2019-134028.8 High
- fortinet fcm-mb40 firmwareDynacolor FCM-MB40 v1.2.0.0 devices have CSRF in all scripts under cgi-bin/.CVE-2019-134018.8 High
- fortinet fcm-mb40 firmwareDynacolor FCM-MB40 v1.2.0.0 use /etc/appWeb/appweb.pass to store administrative web-interface...CVE-2019-134009.8 Critical
- fortinet fcm-mb40 firmwareDynacolor FCM-MB40 v1.2.0.0 devices have a hard-coded SSL/TLS key that is used during an...CVE-2019-133995.9 Medium
- fortinet fcm-mb40 firmwareDynacolor FCM-MB40 v1.2.0.0 devices allow remote attackers to execute arbitrary commands via a...CVE-2019-133987.2 High
- fortinet fortiosA reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4 under SSL...CVE-2019-55886.1 Medium
- fortinet fortiosA reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiOS 5.2.0 to 6.0.4 under SSL...CVE-2019-55866.1 Medium
- fortinet fortiosLack of root file system integrity checking in Fortinet FortiOS VM application images all...CVE-2019-55876.5 Medium
- fortinet fortiosA Host Header Redirection vulnerability in Fortinet FortiOS all versions below 6.0.5 under SSL...CVE-2018-133846.1 Medium
- fortinet fortios, fortiproxy, fortios, fortiproxy +1 more +3 moreAn Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5...CVE-2018-13382In KEVPublic exploitEPSS 81.7%9.1 Critical
- fortinet fortios, fortiproxy, fortios and fortiproxy +2 moreA buffer overflow vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4 and below...CVE-2018-133815.3 Medium
- fortinet fortios, fortiproxy, fortios, fortiproxy +2 moreAn Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet...CVE-2018-13379In KEVPublic exploitEPSS 100.0%9.1 Critical
- fortinet fortios, fortiproxy, fortios and fortiproxy +2 moreA Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5...CVE-2018-13380EPSS 62.5%4.7 Medium
- fortinet forticlient, forticlientwindows +1 moreA local privilege escalation in Fortinet FortiClient for Windows 6.0.4 and earlier allows...CVE-2018-91937.1 High
- fortinet forticlient, forticlient for windows +1 moreA local privilege escalation in Fortinet FortiClient for Windows 6.0.4 and earlier allows...CVE-2018-133687.8 High
- fortinet forticlient, forticlient for windows +1 moreA local privilege escalation in Fortinet FortiClient for Windows 6.0.4 and earlier allows...CVE-2018-91917.8 High
- fortinet fortiosAn Information Exposure vulnerability in Fortinet FortiOS 6.0.1, 5.6.5 and below, allow attackers...CVE-2018-133655.3 Medium
- fortinet fortios, fortiproxy, fortios and fortiproxy +2 moreA heap buffer overflow in Fortinet FortiOS all versions below 6.0.5 in the SSL VPN web portal may...CVE-2018-13383In KEVEPSS 30.7%4.3 Medium
- fortinet forticlient, forticlientwindows +1 moreAn Unsafe Search Path vulnerability in FortiClient Online Installer (Windows version before 6.0.6...CVE-2019-55898.6 High
- fortinet fortianalyzer, fortimanager +1 moreAn Improper Neutralization of Script-Related HTML Tags in Fortinet FortiAnalyzer 5.6.0 and below...CVE-2018-133756.1 Medium
- fortinet fortimanager, fortinet, inc. fortinet fortimanager +1 moreA cleartext transmission of sensitive information vulnerability in Fortinet FortiManager 5.2.0...CVE-2018-13608.1 High
- Show moreLoading…