Skip to contentFortinet vulnerabilities
Products
Show 102 moreShow less
Newest
- fortinet forticlient, forticlientmac +1 moreAn exposure of sensitive information to an unauthorized actor vulnerabiltiy [CWE-200] in...CVE-2022-338782.2 Low
- fortinet fortitesterAn improper neutralization of special elements used in an OS command vulnerability [CWE-78] in...CVE-2022-338707.8 High
- fortinet fortiosA key management error vulnerability [CWE-320] affecting the RSA SSH host key in FortiOS 7.2.0...CVE-2022-303073.9 Low
- fortinet fortimail, fortios, antivirus engine +1 more +3 moreAn insufficient verification of data authenticity vulnerability [CWE-345] in FortiClient,...CVE-2022-261224.7 Medium
- fortinet fortisiemA improper authentication vulnerability in Fortinet FortiSIEM before 6.5.0 allows a local...CVE-2022-261197.8 High
- fortinet fortios, fortiproxy, fortiswitchmanager +2 more +4 moreAn authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version...CVE-2022-40684In KEVPublic exploitEPSS 100.0%9.8 Critical
- fortinet fortitesterAn improper restriction of excessive authentication attempts vulnerability [CWE-307] in...CVE-2022-358468.1 High
- fortinet fortitesterAn improper neutralization of special elements used in an OS command vulnerability [CWE-78] in...CVE-2022-358446.7 Medium
- fortinet fortitesterAn improper neutralization of special elements used in an OS Command ('OS Command Injection')...CVE-2022-338749.8 Critical
- fortinet fortitesterAn improper neutralization of special elements used in an OS Command ('OS Command Injection')...CVE-2022-338736.8 Medium
- fortinet fortitesterAn improper neutralization of special elements used in an OS Command ('OS Command Injection')...CVE-2022-338729.8 Critical
- fortinet fortios, fortiproxy, fortios, fortiproxy +2 moreA access of uninitialized pointer in Fortinet FortiOS version 7.2.0, 7.0.0 through 7.0.5, 6.4.0...CVE-2022-290557.5 High
- fortinet fortianalyzer, fortimanager +1 moreAn exposure of resource to wrong sphere vulnerability [CWE-668] in FortiAnalyzer and FortiManager...CVE-2022-261213.7 Low
- fortinet fortiosA improper neutralization of special elements used in an os command ('os command injection') in...CVE-2021-441719.0 Critical
- fortinet fortisoarAn improper neutralization of special elements used in an OS command ('OS Command Injection')...CVE-2022-290617.2 High
- fortinet fortisoarAn improper neutralization of special elements used in a template engine vulnerability [CWE-1336]...CVE-2022-358476.3 Medium
- fortinet fortiosAn improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS...CVE-2021-430804.6 Medium
- fortinet fortiadcAn improper privilege management vulnerability [CWE-269] in FortiADC versions 6.2.1 and below, 6...CVE-2021-430766.3 Medium
- fortinet fortimailAn improper neutralization of input during web page generation vulnerability [CWE-79] in the...CVE-2022-261145.4 Medium
- fortinet fortisoarAn improper privilege management vulnerability [CWE-269] in Fortinet FortiSOAR before 7.2.1...CVE-2022-302987.0 High
- fortinet fortisoarMultiple relative path traversal vulnerabilities [CWE-23] in Fortinet FortiSOAR before 7.2.1...CVE-2022-290626.3 Medium
- fortinet fortiosA missing cryptographic steps vulnerability [CWE-325] in the functions that encrypt the keytab...CVE-2022-290532.3 Low
- fortinet fortiap, fortiap-s, fortiap-u +2 more +4 moreAn improper neutralization of special elements [CWE-89] used in an OS command vulnerability [CWE...CVE-2022-290587.8 High
- fortinet fortiosA improper verification of source of a communication channel in Fortinet FortiOS with IPS engine...CVE-2022-274916.8 Medium
- fortinet fortiadc, fortimail, fortios +2 more +4 moreA format string vulnerability [CWE-134] in the command line interpreter of FortiADC version 6.0.0...CVE-2022-222997.8 High
- fortinet fortiosAn improper access control vulnerability [CWE-284] in FortiOS versions 6.2.0 through 6.2.11, 6.4...CVE-2022-234424.3 Medium
- fortinet fortiadcA unverified password change in Fortinet FortiADC version 6.2.0 through 6.2.3, 6.1.x, 6.0.x, 5.x...CVE-2022-274845.4 Medium
- fortinet fortiedrA improper neutralization of input during web page generation ('cross-site scripting') in...CVE-2022-290575.4 Medium
- fortinet fortiadcMultiple improper neutralization of special elements used in an SQL Command ('SQL Injection')...CVE-2022-261205.4 Medium
- fortinet fortianalyzer, fortimanager, fortimanager , fortianalyzer +2 moreA privilege chaining vulnerability [CWE-268] in FortiManager and FortiAnalyzer 6.0.x, 6.2.x, 6.4...CVE-2022-261186.7 Medium
- fortinet fortiosAn improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79]...CVE-2022-234384.7 Medium
- fortinet fortideceptorMultiple relative path traversal vulnerabilities [CWE-23] in FortiDeceptor management interface 1...CVE-2022-303026.5 Medium
- fortinet fortianalyzer, fortimanager, fortimanager, fortianalyzer +2 moreA improper neutralization of special elements used in an os command ('os command injection') in...CVE-2022-274837.2 High
- fortinet forticlient, forticlientwindows +1 moreA relative path traversal vulnerability [CWE-23] in FortiClient for Windows versions 7.0.2 and...CVE-2021-410317.8 High
- fortinet forticlient, forticlientwindows +1 moreAn execution with unnecessary privileges vulnerability [CWE-250] in FortiClientWindows 7.0.0...CVE-2022-261137.7 High
- fortinet fortitokenandroid, fortinet fortitokenios, fortinet fortitokenwinapp, fortitoken mobile +1 moreA improper validation of certificate with host mismatch in Fortinet FortiTokenAndroid version 5.0...CVE-2021-221316.4 Medium
- fortinet fortiap-uA path traversal vulnerability [CWE-22] in FortiAP-U CLI 6.2.0 through 6.2.3, 6.0.0 through 6.0.4...CVE-2022-303017.8 High
- fortinet fortiddosA use of hard-coded cryptographic key vulnerability [CWE-321] in FortiDDoS API 5.5.0 through 5.5...CVE-2022-290608.1 High
- fortinet fortiauthenticator agent for microsoft outlook web access, fortiauthenticator outlookagent +1 moreAn improper neutralization of input during web page generation vulnerability [CWE-79] in...CVE-2022-223046.1 Medium
- fortinet fortios, fortiproxy, fortiswitch +3 more +5 moreAn integer overflow / wraparound vulnerability [CWE-190] in FortiSwitch 7.0.2 and below, 6.4.9...CVE-2021-427554.3 Medium
- fortinet fortios, fortiproxy, fortiproxy, fortios +2 moreA stack-based buffer overflow vulnerability [CWE-121] in the command line interpreter of FortiOS...CVE-2021-441706.7 Medium
- fortinet fortinacAn empty password in configuration file vulnerability [CWE-258] in FortiNAC version 8.3.7 and below, 8.5.2 and below, 8.5.4, 8.6.0, 8.6.5 and below, 8.7.6 and below, 8.8.11 and below, 9.1.5 and below,…CVE-2022-261178.8 High
- fortinet fortiosAn improper certificate validation vulnerability [CWE-295] in FortiOS 6.0.0 through 6.0.14, 6.2.0...CVE-2022-223065.4 Medium
- fortinet forticlient, forticlientwindows +1 moreA external control of file name or path in Fortinet FortiClientWindows version 7.0.2 and below,...CVE-2021-430668.4 High
- fortinet fortiproxy, fortios +1 moreAn improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS...CVE-2021-430816.1 Medium
- fortinet forticlient, forticlientlinux +1 moreAn incorrect permission assignment for critical resource vulnerability [CWE-732] in FortiClient...CVE-2021-441676.8 Medium
- fortinet fortinacMultiple improper neutralization of special elements used in SQL commands ('SQL Injection')...CVE-2022-261167.2 High
- fortinet fortios, fortiproxy, fortios, fortiproxy +2 moreA server-generated error message containing sensitive information in Fortinet FortiOS 7.0.0...CVE-2021-432064.3 Medium
- fortinet fortisoarAn improper access control in Fortinet FortiSOAR before 7.2.0 allows unauthenticated attackers to...CVE-2022-234437.5 High
- fortinet fortiosAn improper access control vulnerability [CWE-284] in FortiOS versions 6.4.8 and prior and 7.0.3...CVE-2021-410326.3 Medium
- Show moreLoading…