Skip to contentFortinet vulnerabilities
Products
Show 102 moreShow less
Newest
- fortinet forticlientems, forticlient endpoint management server +1 moreA path traversal vulnerability [CWE-22] in FortiClientEMS versions 6.4.1 and below; 6.2.8 and...CVE-2020-159415.4 Medium
- fortinet fortianalyzer, fortimanager, fortimanager, fortianalyzer +2 moreAn information disclosure vulnerability [CWE-200] in FortiAnalyzerVM and FortiManagerVM versions...CVE-2021-361703.2 Low
- fortinet fortisdnconnectorA insufficiently protected credentials in Fortinet FortiSDNConnector version 1.1.7 and below...CVE-2021-361784.3 Medium
- fortinet fortimanagerAn improper authentication in Fortinet FortiManager version 6.4.3 and below, 6.2.6 and below...CVE-2021-240175.4 Medium
- fortinet fortimanagerAn improper neutralization of formula elements in a csv file in Fortinet FortiManager version 6.4...CVE-2021-240163.7 Low
- fortinet fortisandboxAn insufficient session expiration vulnerability in FortiSandbox versions 3.2.1 and below may...CVE-2020-290125.6 Medium
- fortinet fortiwebA Improper neutralization of special elements used in a command ('Command Injection') in Fortinet...CVE-2021-361828.8 High
- fortinet fortiwebA stack-based buffer overflow in Fortinet FortiWeb version 6.3.14 and below, 6.2.4 and below...CVE-2021-361798.0 High
- fortinet fortimanagerAn improper access control vulnerability in FortiManager versions 6.4.0 to 6.4.3 may allow an...CVE-2021-24006Public exploit6.3 Medium
- fortinet fortisandboxAn improper access control vulnerability (CWE-284) in FortiSandbox versions 3.2.1 and below and 3...CVE-2020-159394.3 Medium
- fortinet fortiportalAn improper neutralization of input during web page generation vulnerability (CWE-79) in...CVE-2021-326025.8 Medium
- fortinet fortiportalA use of hard-coded credentials (CWE-798) vulnerability in FortiPortal versions 5.2.5 and below,...CVE-2021-325889.8 Critical
- fortinet fortianalyzer, fortimanager, fortianalyzer, fortimanager +2 moreAn improper access control vulnerability in FortiManager and FortiAnalyzer GUI interface 7.0.0, 6...CVE-2021-325874.3 Medium
- fortinet fortianalyzer, fortimanager, fortianalyzer, fortimanager +2 moreMultiple improper neutralization of input during web page generation (CWE-79) in FortiManager and...CVE-2021-325974.6 Medium
- fortinet fortimanager, fortianalyzer, fortianalyzer, fortimanager +2 moreA server-side request forgery (SSRF) (CWE-918) vulnerability in FortiManager and FortiAnalyser...CVE-2021-326038.8 High
- fortinet fortianalyzer, fortimanager, fortianalyzer, fortimanager +2 moreAn improper neutralization of CRLF sequences in HTTP headers ('HTTP Response Splitting')...CVE-2021-325984.3 Medium
- fortinet fortiauthenticator, fortisandbox, fortisandbox, fortiauthenticator +2 moreAn uncontrolled resource consumption (denial of service) vulnerability in the login modules of...CVE-2021-221247.5 High
- fortinet fortisandboxMultiple instances of improper neutralization of input during web page generation vulnerabilities...CVE-2021-240145.4 Medium
- fortinet fortisandboxMultiple instances of heap-based buffer overflow in the command shell of FortiSandbox before 4.0...CVE-2021-260966.4 Medium
- fortinet fortisandboxAn improper neutralization of special elements used in an OS Command vulnerability in...CVE-2021-260978.8 High
- fortinet fortiportalA use of one-way hash with a predictable salt vulnerability in the password storing mechanism of...CVE-2021-325966.0 Medium
- fortinet fortisandboxInstances of SQL Injection vulnerabilities in the checksum search and MTA-quarantine modules of...CVE-2020-290118.8 High
- fortinet fortiportalA Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Fortinet...CVE-2021-361686.5 Medium
- fortinet fortisandboxImproper limitation of a pathname to a restricted directory vulnerabilities in FortiSandbox 3.2.0...CVE-2021-240108.1 High
- fortinet fortiosA buffer underwrite vulnerability in the firmware verification routine of FortiOS before 7.0.1...CVE-2021-240184.3 Medium
- fortinet fortiportalMultiple improper neutralization of special elements used in an SQL command vulnerabilities in...CVE-2021-325909.9 Critical
- fortinet fortiportalAn unrestricted file upload vulnerability in the web interface of FortiPortal 6.0.0 through 6.0.4...CVE-2021-325945.4 Medium
- fortinet fortisandboxAn instance of small space of random values in the RPC API of FortiSandbox before 4.0.0 may allow...CVE-2021-260985.3 Medium
- fortinet fortimailThe combination of various cryptographic issues in the session management of FortiMail 6.4.0...CVE-2021-260957.5 High
- fortinet fortianalyzer, fortimanager, fortianalyzer, fortimanager +2 moreA buffer overflow vulnerability in FortiAnalyzer CLI 6.4.5 and below, 6.2.7 and below, 6.0.x and...CVE-2021-240226.7 Medium
- fortinet fortisandboxAn instance of improper neutralization of special elements in the sniffer module of FortiSandbox...CVE-2021-221256.3 Medium
- fortinet fortimailMultiple Path traversal vulnerabilities in the Webmail of FortiMail before 6.4.4 may allow a...CVE-2021-240138.8 High
- fortinet fortimailAn improper neutralization of special elements used in an OS Command vulnerability in the...CVE-2021-240157.2 High
- fortinet fsso windows dc agent, fsso windows ca, single sign-on +1 moreAn improper authentication vulnerability in FSSO Collector version 5.0.295 and below may allow an...CVE-2021-26088Public exploit7.1 High
- fortinet fortimailA missing release of memory after its effective lifetime vulnerability in the Webmail of...CVE-2021-260905.3 Medium
- fortinet forticlient, forticlientmac +1 moreAn improper symlink following in FortiClient for Mac 6.4.3 and below may allow an non-privileged...CVE-2021-260896.7 Medium
- fortinet fortimailMissing cryptographic steps in the Identity-Based Encryption service of FortiMail before 7.0.0...CVE-2021-260994.4 Medium
- fortinet fortimailMultiple improper neutralization of special elements of SQL commands vulnerabilities in FortiMail...CVE-2021-240079.8 Critical
- fortinet fortiap, fortiap-s, fortiap-w2 +1 more +3 moreAn improper neutralization of special elements used in an OS Command vulnerability in FortiAP's...CVE-2021-261067.8 High
- fortinet fortimailMultiple instances of incorrect calculation of buffer size in the Webmail and Administrative...CVE-2021-221298.8 High
- fortinet fortisandboxA concurrent execution using shared resource with improper synchronization ('race condition') in...CVE-2020-290146.3 Medium
- fortinet fortimailA missing cryptographic step in the Identity-Based Encryption service of FortiMail before 7.0.0...CVE-2021-261005.9 Medium
- fortinet fortimailA missing cryptographic step in the implementation of the hash digest algorithm in FortiMail 6.4...CVE-2021-240207.5 High
- fortinet fortiauthenticatorUsage of hard-coded cryptographic keys to encrypt configuration files and debug logs in...CVE-2021-240054.0 Medium
- fortinet fortiai, fortiai firmware +1 moreAn improper input validation in FortiAI v1.4.0 and earlier may allow an authenticated user to...CVE-2021-240237.8 High
- fortinet fortiproxyA stack-based buffer overflow vulnerability in FortiProxy physical appliance CLI 2.0.0 to 2.0.1,...CVE-2021-221306.7 Medium
- fortinet fortiosAn improper following of a certificate's chain of trust vulnerability in FortiGate versions 6.4.0...CVE-2021-240126.5 Medium
- fortinet fortipresenceTwo authorization bypass through user-controlled key vulnerabilities in the Fortinet...CVE-2020-66414.3 Medium
- fortinet fortiwebAn OS command injection vulnerability in FortiWeb's management interface 6.3.7 and below, 6.2.3...CVE-2021-22123Public exploitEPSS 84.4%7.6 High
- fortinet fortiswitchA missing release of memory after effective lifetime vulnerability in FortiSwitch 6.4.0 to 6.4.6,...CVE-2021-261116.5 Medium
- Show moreLoading…