Skip to contentFortinet vulnerabilities
Products
Show 102 moreShow less
Newest
- fortinet fortiadcA improper neutralization of special elements used in an os command ('os command injection') in...CVE-2022-274827.4 High
- fortinet fortiextender, fortiextender firmware +1 moreA improper neutralization of special elements used in an os command ('os command injection') in...CVE-2022-274897.0 High
- fortinet fortios, fortiproxy +1 moreAn improper privilege management vulnerability [CWE-269] in Fortinet FortiOS version 7.2.0 and...CVE-2022-383784.0 Medium
- fortinet fortiosAn improper neutralization of input during web page generation [CWE-79] vulnerability in FortiOS...CVE-2022-413348.6 High
- fortinet fortios, fortiproxy +1 moreAn improper certificate validation vulnerability [CWE-295] in FortiOS 7.2.0 through 7.2.3, 7.0.0...CVE-2022-399484.4 Medium
- fortinet fortianalyzerAn improper neutralization of input during web page generation vulnerability [CWE-79] in...CVE-2022-303044.2 Medium
- fortinet fortinacMultiple improper neutralization of input during web page generation ('Cross-site Scripting')...CVE-2022-383765.8 Medium
- fortinet fortinac, fortinac-f +1 moreAn improper authorization vulnerability [CWE-285] in Fortinet FortiNAC version 9.4.0 through 9.4...CVE-2022-383758.6 High
- fortinet fortiwebA relative path traversal vulnerability [CWE-23] in FortiWeb version 7.0.1 and below, 6.4 all...CVE-2023-237784.7 Medium
- fortinet fortiwebMultiple improper neutralization of special elements used in an OS Command ('OS Command Injection...CVE-2023-237796.6 Medium
- fortinet fortiwebA stack-based buffer overflow vulnerability [CWE-121] in the CA sign functionality of FortiWeb...CVE-2022-303066.3 Medium
- fortinet fortiwebA stack-based buffer overflow vulnerability [CWE-121] in FortiWeb version 7.0.1 and earlier, 6.4...CVE-2022-338716.3 Medium
- fortinet fortiwebA stack-based buffer overflow vulnerability [CWE-121] in FortiWeb version 7.0.1 and below, 6.4...CVE-2023-237816.1 Medium
- fortinet fortiwebA heap-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb version 6...CVE-2023-237827.1 High
- fortinet fortiwebA use of externally-controlled format string in Fortinet FortiWeb version 7.0.0 through 7.0.1,...CVE-2023-237836.5 Medium
- fortinet fortiwebA relative path traversal in Fortinet FortiWeb version 7.0.0 through 7.0.2, FortiWeb version 6.3...CVE-2023-237845.6 Medium
- fortinet fortiwebA stack-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, Fortinet FortiWeb...CVE-2023-237807.6 High
- fortinet fortiwebA stack-based buffer overflow in Fortinet FortiWeb 6.4 all versions, FortiWeb versions 6.3.17 and...CVE-2023-256027.4 High
- fortinet fortiwebMultiple stack-based buffer overflow vulnerabilities [CWE-121] in the proxy daemon of FortiWeb 5...CVE-2021-42756Public exploitEPSS 35.2%9.3 Critical
- fortinet fortiwebA condition for session fixation vulnerability [CWE-384] in the session management of FortiWeb...CVE-2021-427618.5 High
- fortinet fortiwebA path traversal vulnerability [CWE-23] in the API of FortiWeb 7.0.0 through 7.0.1, 6.3.0 through...CVE-2022-302995.0 Medium
- fortinet fortios, fortiproxy, fortiswitch +1 more +3 moreAn improper verification of cryptographic signature vulnerability [CWE-347] in FortiWeb 6.4 all...CVE-2021-430744.1 Medium
- fortinet fortiwebA relative path traversal vulnerability [CWE-23] in FortiWeb 7.0.0 through 7.0.1, 6.3.6 through 6...CVE-2022-303006.2 Medium
- fortinet fortiwebAn improper neutralization of special elements used in an os command ('OS Command Injection') ...CVE-2022-303038.6 High
- fortinet fortiportalAn insertion of sensitive information into log file vulnerability [CWE-532] in the FortiPortal...CVE-2022-439544.1 Medium
- fortinet fortios, fortiproxy, fortiswitchmanager +2 moreA relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2,...CVE-2022-413358.6 High
- fortinet fortimanagerAn incorrect user management vulnerability [CWE-286] in the FortiManager version 6.4.6 and below...CVE-2022-458576.0 Medium
- fortinet fortiadcA improper neutralization of special elements used in an os command ('os command injection') in...CVE-2022-399478.6 High
- fortinet fortiwebAn improper neutralization of CRLF sequences in HTTP headers ('HTTP Response Splitting')...CVE-2022-424715.3 Medium
- fortinet fortiportalAn improper neutralization of input during web page generation vulnerability [CWE-79] in...CVE-2022-413366.6 Medium
- fortinet fortitesterMultiple improper neutralization of special elements used in an OS Command ('OS Command Injection...CVE-2022-358457.6 High
- fortinet fortios, fortiproxy +1 moreA heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0...CVE-2022-42475In KEVPublic exploitEPSS 99.5%9.3 Critical
- fortinet fortiadcAn improper neutralization of special elements used in an SQL Command ('SQL Injection')...CVE-2022-338755.1 Medium
- fortinet fortiadcMultiple instances of improper input validation vulnerability in Fortinet FortiADC version 7.1.0,...CVE-2022-338765.1 Medium
- fortinet fortisoarImproper neutralization of input during web page generation [CWE-79] in FortiSOAR 7.0.0 through 7...CVE-2022-383793.4 Low
- fortinet fortideceptor, fortisandbox +1 moreAn insufficient logging [CWE-778] vulnerability in FortiSandbox versions 4.0.0 to 4.0.2, 3.2.0 to...CVE-2022-303053.6 Low
- fortinet fortios, fortiproxy +1 moreA improper neutralization of input during web page generation ('cross-site scripting') in...CVE-2022-406803.8 Low
- fortinet fortios, fortiproxy +1 moreAn authentication bypass by assumed-immutable data vulnerability [CWE-302] in the FortiOS SSH...CVE-2022-358437.7 High
- fortinet fortianalyzer, fortimanager +1 moreAn improper access control vulnerability [CWE-284] in FortiManager 7.2.0, 7.0.0 through 7.0.3, 6...CVE-2022-383774.1 Medium
- fortinet fortisoarA missing authentication for a critical function vulnerability in Fortinet FortiSOAR 6.4.0 - 6.4...CVE-2022-424735.3 Medium
- fortinet fortianalyzer, fortimanager, fortianalyzer, fortimanager +2 moreAn improper neutralization of input during web page generation vulnerability [CWE-79] exists in...CVE-2022-399508.0 High
- fortinet fortiedrAn improper control of a resource through its lifetime vulnerability [CWE-664] in FortiEDR...CVE-2022-399494.4 Medium
- fortinet fortimailAn improper access control vulnerability [CWE-284] in FortiMail 7.2.0, 7.0.0 through 7.0.3, 6.4...CVE-2022-399455.4 Medium
- fortinet fortiadcAn improper handling of malformed request vulnerability [CWE-228] exists in FortiADC 5.0 all...CVE-2022-383815.3 Medium
- fortinet fortiosAn improper access control [CWE-284] vulnerability in FortiOS version 7.2.0 and versions 7.0.0...CVE-2022-38380EPSS 23.0%4.3 Medium
- fortinet fortiadcA improper neutralization of input during web page generation ('cross-site scripting') in...CVE-2022-38374Public exploit8.8 High
- fortinet fortideceptorAn improper neutralization of input during web page generation vulnerability [CWE-79] in...CVE-2022-383738.0 High
- fortinet fortitesterA hidden functionality vulnerability [CWE-1242] in FortiTester CLI 2.3.0 through 3.9.1, 4.0.0...CVE-2022-383726.7 Medium
- fortinet fortiadcAn improper neutralization of input during web page generation vulnerability [CWE-79] in FortiADC...CVE-2022-358518.0 High
- fortinet fortiosAn exposure of sensitive information to an unauthorized actor vulnerabiltiy [CWE-200] in FortiOS...CVE-2022-358423.7 Low
- Show moreLoading…