Skip to contentFortinet vulnerabilities
Products
Show 102 moreShow less
Newest
- fortinet fortiisolatorAn improper access control vulnerability [CWE-284] in FortiIsolator versions 2.3.2 and below may...CVE-2021-410208.8 High
- fortinet fortiwanA use of a one-way hash with a predictable salt vulnerability [CWE-760] in FortiWAN before 4.5.9...CVE-2021-261136.2 Medium
- fortinet fortiauthenticatorAn improper neutralization of special elements used in an OS command vulnerability in the command...CVE-2021-261166.7 Medium
- fortinet fortiwanAn improper neutralization of input during web page generation vulnerability [CWE-79] in FortiWAN...CVE-2021-325857.2 High
- fortinet forticlient, forticlientlinux +1 moreAn improper input validation vulnerability in FortiClient for Linux 6.4.x before 6.4.3,...CVE-2021-221277.1 High
- fortinet fortiwebA relative path traversal in FortiWeb versions 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow...CVE-2021-410266.5 Medium
- fortinet fortianalyzer, fortimanager, fortiportal +1 more +3 moreMultiple OS command injection (CWE-78) vulnerabilities in the command line interface of FortiManager 6.2.7 and below, 6.4.5 and below and all versions of 6.2.x, 6.0.x and 5.6.x, FortiAnalyzer 6.2.7 an…CVE-2021-261047.8 High
- fortinet forticlient, forticlientwindows +1 moreA improper initialization in Fortinet FortiClient (Windows) version 6.0.10 and below, version 6.2...CVE-2021-441698.2 High
- fortinet fortiedrA use of hard-coded cryptographic key vulnerability [CWE-321] in the registration mechanism of...CVE-2022-234407.8 High
- fortinet forticlient, forticlientlinux +1 moreAn exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in...CVE-2021-432054.3 Medium
- fortinet fortiwanA use of a broken or risky cryptographic algorithm vulnerability [CWE-327] in the Dynamic Tunnel...CVE-2021-325936.5 Medium
- fortinet fortiwanMultiple improper neutralization of special elements used in an OS command vulnerabilities (CWE...CVE-2021-240097.2 High
- fortinet fortiwanMultiple improper neutralization of special elements used in an SQL command vulnerabilities in...CVE-2021-261149.8 Critical
- fortinet fortiwanMultiple stack-based buffer overflow vulnerabilities [CWE-121] both in network daemons and in the...CVE-2021-261128.1 High
- fortinet fortiedrA use of hard-coded cryptographic key vulnerability [CWE-321] in FortiEDR versions 5.0.2, 5.0.1,...CVE-2022-234419.1 Critical
- fortinet fortisandboxAn improper input validation vulnerability in the sniffer interface of FortiSandbox before 3.2.2...CVE-2020-290135.4 Medium
- fortinet fortiedrA improper control of a resource through its lifetime in Fortinet FortiEDR version 5.0.3 and...CVE-2022-234464.4 Medium
- fortinet fortiwlmMultiple relative path traversal vulnerabilities [CWE-23] in FortiWLM management interface 8.6.2...CVE-2021-430705.4 Medium
- fortinet fortitoken mobile, fortitokenandroid +1 moreAn improper access control vulnerability [CWE-284 ] in FortiToken Mobile (Android) external push...CVE-2021-441664.1 Medium
- fortinet fortiap-cAn improper neutralization of special elements used in an OS Command vulnerability [CWE-78] in...CVE-2022-223017.8 High
- fortinet fortimanagerAn exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE...CVE-2022-223032.8 Low
- fortinet fortiwlmA improper neutralization of special elements used in an sql command ('sql injection') in...CVE-2021-430778.8 High
- fortinet fortiosA improper input validation in Fortinet FortiGate version 6.4.3 and below, version 6.2.5 and...CVE-2020-159362.6 Low
- fortinet fortianalyzer, fortimanager, fortimanager, fortianalyzer +2 moreA improper handling of insufficient permissions or privileges in Fortinet FortiAnalyzer version 5...CVE-2022-223004.3 Medium
- fortinet fortiwlmA improper neutralization of special elements used in an os command ('os command injection') in...CVE-2021-430758.8 High
- fortinet fortimailAn improper input validation vulnerability in the web server CGI facilities of FortiMail before 7...CVE-2021-325867.7 High
- fortinet fortimailAn improper authentication vulnerability in FortiMail before 7.0.1 may allow a remote attacker to...CVE-2021-361669.8 Critical
- fortinet fortiportalThe use of a cryptographically weak pseudo-random number generator in the password reset feature...CVE-2021-361718.1 High
- fortinet fortios, fortiproxy, fortios, fortiproxy +2 moreFailure to sanitize input in the SSL VPN web portal of FortiOS 5.2.10 through 5.2.15, 5.4.0...CVE-2021-260924.7 Medium
- fortinet fortiwebA improper neutralization of special elements used in an os command ('os command injection') in...CVE-2021-410188.8 High
- fortinet fortiweb, fortiadc, fortiddos +7 more +9 moreMultiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2...CVE-2021-361936.3 Medium
- fortinet fortimailA improper neutralization of input during web page generation ('cross-site scripting') in...CVE-2021-43062Public exploitEPSS 12.9%6.1 Medium
- fortinet fortiwebA improper neutralization of special elements used in an os command ('os command injection') in...CVE-2021-430738.8 High
- fortinet fortiextender firmwareA improper neutralization of special elements used in a command ('command injection') in Fortinet...CVE-2021-410167.8 High
- fortinet fortiauthenticatorAn improper access control vulnerability [CWE-284] in FortiAuthenticator HA service 6.3.2 and...CVE-2021-361774.2 Medium
- fortinet fortiwebAn improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability ...CVE-2021-427538.1 High
- fortinet fortimailA exposure of sensitive information to an unauthorized actor in Fortinet FortiMail versions 6.0.9...CVE-2020-159335.3 Medium
- fortinet fortiosA download of code without integrity check vulnerability in the "execute restore src-vis" command...CVE-2021-44168In KEVPublic exploit3.3 Low
- fortinet forticlient, forticlient endpoint management server, forticlientems, forticlientwindows, forticlientlinux, forticlientmac +2 moreA combination of a use of hard-coded cryptographic key vulnerability [CWE-321] in FortiClientEMS...CVE-2021-410288.2 High
- fortinet fortiosA Hidden Functionality in Fortinet FortiOS 7.x before 7.0.1, FortiOS 6.4.x before 6.4.7 allows...CVE-2021-361694.2 Medium
- fortinet fortiauthenticatorA improper authentication in Fortinet FortiAuthenticator version 6.4.0 allows user to bypass the...CVE-2021-430685.4 Medium
- fortinet forticlient, forticlientwindows +1 moreAn improper authorization vulnerabiltiy [CWE-285] in FortiClient Windows versions 7.0.0 and 6.4.6...CVE-2021-361674.3 Medium
- fortinet meru ap, meru firmware +1 moreA violation of secure design principles in Fortinet Meru AP version 8.6.1 and below, version 8.5...CVE-2021-427596.7 Medium
- fortinet fortiwebA heap-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and...CVE-2021-430718.8 High
- fortinet fortinacA incorrect permission assignment for critical resource in Fortinet FortiNAC version 9.2.0, version 9.1.3 and below, version 8.8.9 and below allows attacker to gain higher privileges via the access to…CVE-2021-430657.8 High
- fortinet forticlientems, forticlient enterprise management server +1 moreA missing encryption of sensitive data in Fortinet FortiClientEMS version 7.0.1 and below,...CVE-2021-361896.8 Medium
- fortinet forticlient, forticlientwindows +1 moreA improper control of a resource through its lifetime in Fortinet FortiClientWindows version 6.4...CVE-2021-432044.4 Medium
- fortinet fortiwebMultiple stack-based buffer overflows in the API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0...CVE-2021-361948.8 High
- fortinet fortiwebMultiple heap-based buffer overflow vulnerabilities in some web API controllers of FortiWeb 6.4.1...CVE-2021-410178.8 High
- fortinet fortiwebMultiple vulnerabilities in the authentication mechanism of confd in FortiWeb versions 6.4.1, 6.4...CVE-2021-410257.3 High
- Show moreLoading…