Skip to contentFortinet vulnerabilities
Products
Show 102 moreShow less
Newest
- fortinet fortiosA heap-based buffer overflow in the firmware signature verification function of FortiOS versions...CVE-2021-361738.0 High
- fortinet fortiwebMultiple command injection vulnerabilities in the command line interpreter of FortiWeb versions 6...CVE-2021-361954.2 Medium
- fortinet forticlient enterprise management server, forticlientems +1 moreAn authentication bypass by capture-replay vulnerability [CWE-294] in FortiClient EMS versions 7...CVE-2021-410305.4 Medium
- fortinet fortinacA privilege escalation vulnerability in FortiNAC versions 8.8.8 and below and 9.1.2 and below may...CVE-2021-410217.8 High
- fortinet fortiwebAn improper access control vulnerability [CWE-284] in FortiWeb versions 6.4.1 and below and 6.3...CVE-2021-410135.3 Medium
- fortinet fortiwebA improper neutralization of input during web page generation ('cross-site scripting') in...CVE-2021-361886.1 Medium
- fortinet fortiwebA improper neutralization of input during web page generation ('cross-site scripting') in...CVE-2021-430636.1 Medium
- fortinet fortiwebA unintended proxy or intermediary ('confused deputy') in Fortinet FortiWeb version 6.4.1 and...CVE-2021-361905.5 Medium
- fortinet fortiwebA uncontrolled resource consumption in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and...CVE-2021-410147.5 High
- fortinet fortiwebA url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and...CVE-2021-361914.1 Medium
- fortinet fortiwebA stack-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, allows an...CVE-2021-410277.3 High
- fortinet fortiwebA improper neutralization of input during web page generation ('cross-site scripting') in...CVE-2021-410156.1 Medium
- fortinet fortiwebA url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and 6.4...CVE-2021-430644.3 Medium
- fortinet fortiosAn integer overflow or wraparound vulnerability in the memory allocator of SSLVPN in FortiOS...CVE-2021-261098.1 High
- fortinet fortiosA use of hard-coded cryptographic key vulnerability in the SSLVPN of FortiOS before 7.0.1 may...CVE-2021-261087.5 High
- fortinet fortios, fortiproxy +1 moreA relative path traversal [CWE-23] vulnerabiltiy in FortiOS versions 7.0.0 and 7.0.1 and...CVE-2021-410247.5 High
- fortinet fortiproxy, fortios +1 moreAn insufficient verification of data authenticity vulnerability (CWE-345) in the user interface...CVE-2021-261036.3 Medium
- fortinet fortiadc, fortimail, fortisandbox +1 more +3 moreA missing cryptographic steps vulnerability in the function that encrypts users' LDAP and RADIUS...CVE-2021-325915.3 Medium
- fortinet fortiwlmA improper neutralization of input during web page generation ('cross-site scripting') in...CVE-2021-427525.4 Medium
- fortinet fortiwlmA improper neutralization of special elements used in an sql command ('sql injection') in...CVE-2021-427608.8 High
- fortinet fortiwlmA improper neutralization of input during web page generation ('cross-site scripting') in...CVE-2021-410296.4 Medium
- fortinet fortiauthenticatorA exposure of sensitive information to an unauthorized actor in Fortinet FortiAuthenticator...CVE-2021-430678.3 High
- fortinet fortios, fortiadc, fortianalyzer +13 more +15 moreA buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0...CVE-2021-427576.3 Medium
- fortinet fortiwlcAn improper access control vulnerability [CWE-284] in FortiWLC 8.6.1 and below may allow an...CVE-2021-427588.8 High
- fortinet fortiwebMultiple improper neutralization of special elements used in a command vulnerabilities [CWE-77]...CVE-2021-361808.1 High
- fortinet fortios, fortiproxy, fortios, fortiproxy +2 moreAn improper access control vulnerability [CWE-284] in FortiOS autod daemon 7.0.0, 6.4.6 and below...CVE-2021-261107.8 High
- fortinet forticlient, forticlient enterprise management server, forticlientwindows, forticlientems +2 moreAn unsafe search path vulnerability in FortiClientWindows 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x...CVE-2021-325927.8 High
- fortinet fortiosAn exposure of sensitive information to an unauthorized actor vulnerability in FortiOS CLI 7.0.0,...CVE-2021-326005.0 Medium
- fortinet fortimanagerAn exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in...CVE-2021-361925.2 Medium
- fortinet fortiadcA cleartext storage of sensitive information in GUI in FortiADC versions 5.4.3 and below, 6.0.0...CVE-2020-159354.3 Medium
- fortinet forticlient, forticlientmac +1 moreAn improper control of generation of code vulnerability [CWE-94] in FortiClientMacOS versions 7.0...CVE-2021-427543.2 Low
- fortinet fortiwlmA improper neutralization of Special Elements used in an SQL Command ('SQL Injection') in...CVE-2021-361848.8 High
- fortinet fortiwlmA improper neutralization of special elements used in an OS command ('OS Command Injection') in...CVE-2021-361858.8 High
- fortinet forticlient, forticlientwindows +1 moreAn improper authorization vulnerability [CWE-285] in FortiClient for Windows versions 7.0.1 and...CVE-2021-361837.4 High
- fortinet fortiwebA stack-based buffer overflow in Fortinet FortiWeb version 6.4.0, version 6.3.15 and below, 6.2.5...CVE-2021-361868.8 High
- fortinet fortiwebA uncontrolled resource consumption in Fortinet FortiWeb version 6.4.0, version 6.3.15 and below,...CVE-2021-361875.3 Medium
- fortinet fortisiem, fortisiemwindowsagent +1 moreA unprotected storage of credentials in Fortinet FortiSIEM Windows Agent version 4.1.4 and below...CVE-2021-410235.5 Medium
- fortinet fortisiem, fortisiemwindowsagent +1 moreA improper privilege management in Fortinet FortiSIEM Windows Agent version 4.1.4 and below...CVE-2021-410227.8 High
- fortinet fortiportalA memory allocation with excessive size value vulnerability in the license verification function...CVE-2021-361744.3 Medium
- fortinet fortiportalMultiple uncontrolled resource consumption vulnerabilities in the web interface of FortiPortal...CVE-2021-361766.1 Medium
- fortinet fortiportalMultiple uncontrolled resource consumption vulnerabilities in the web interface of FortiPortal...CVE-2021-325956.5 Medium
- fortinet fortianalyzerA improper neutralization of input during web page generation ('cross-site scripting') in...CVE-2020-128144.1 Medium
- fortinet fortimanagerAn improper access control vulnerability [CWE-284] in FortiManager versions 6.4.4 and 6.4.5 may...CVE-2021-261076.3 Medium
- fortinet forticlientems, forticlient enterprise management server +1 moreAn improper neutralization of input vulnerability [CWE-79] in FortiClientEMS versions 6.4.1 and...CVE-2020-159404.1 Medium
- fortinet fortiosAn improper validation of certificate with host mismatch [CWE-297] vulnerability in FortiOS...CVE-2021-410193.5 Low
- fortinet fortiportalAn improper restriction of XML external entity reference vulnerability in the parser of XML...CVE-2021-361724.3 Medium
- fortinet fortiportalA concurrent execution using shared resource with improper Synchronization vulnerability ('Race...CVE-2021-361813.1 Low
- fortinet fortianalyzerAn improper neutralization of input vulnerability [CWE-79] in FortiAnalyzer versions 6.4.3 and...CVE-2021-240214.3 Medium
- fortinet forticlientems, forticlient endpoint management server +1 moreAn insufficient session expiration vulnerability [CWE- 613] in FortiClientEMS versions 6.4.2 and...CVE-2021-24019Public exploit8.1 High
- fortinet fortiwebmanager, fortiweb +1 moreAn improper neutralization of input vulnerability [CWE-79] in FortiWebManager versions 6.2.3 and...CVE-2021-361754.1 Medium
- Show moreLoading…