Skip to contentFortinet vulnerabilities
Products
Show 102 moreShow less
Newest
- fortinet fortiadcAn improper neutralization of special elements used in an OS command vulnerability [CWE-78] in...CVE-2023-279997.6 High
- fortinet fortios, fortiproxy +1 moreA out-of-bounds write in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0...CVE-2023-226407.1 High
- fortinet fortiauthenticatorAn improper neutralization of script-related HTML tags in a web page vulnerability [CWE-80] in...CVE-2022-358504.2 Medium
- fortinet fortiosA permissive list of allowed inputs vulnerability [CWE-183] in FortiGate version 7.2.3 and below,...CVE-2022-424694.1 Medium
- fortinet fortianalyzer, fortimanager +1 moreAn improper certificate validation vulnerability [CWE-295] in FortiAnalyzer and FortiManager 7.2...CVE-2023-226426.8 Medium
- fortinet fortisandboxA improper neutralization of special elements used in an sql command ('sql injection')...CVE-2022-274856.2 Medium
- fortinet fortios, fortiproxy +1 moreAn improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet...CVE-2022-439474.7 Medium
- fortinet fortideceptor, fortisandbox +1 moreA improper privilege management in Fortinet FortiSandbox version 4.2.0 through 4.2.2, 4.0.0...CVE-2022-274878.3 High
- fortinet forticlient, forticlientwindows +1 moreMultiple vulnerabilities including an incorrect permission assignment for critical resource [CWE...CVE-2022-439467.3 High
- fortinet fortiwebAn improper neutralization of input during web page generation [CWE-79] in the FortiWeb web...CVE-2022-439558.0 High
- fortinet fortiadcAn improper neutralization of input during web page generation ('Cross-site Scripting')...CVE-2022-439523.3 Low
- fortinet fortianalyzerAn improper input validation vulnerability [CWE-20] in FortiAnalyzer version 7.2.1 and below,...CVE-2022-424776.5 Medium
- fortinet fortios, fortiproxy +1 moreA url redirection to untrusted site ('open redirect') in Fortinet FortiOS version 7.2.0 through 7...CVE-2023-226414.1 Medium
- fortinet fortiadc, fortiweb +1 moreA improper neutralization of special elements used in an os command ('os command injection') in...CVE-2022-439486.5 Medium
- fortinet fortipresence, fortiproxy +1 moreA missing authentication for critical function vulnerability [CWE-306] in FortiPresence...CVE-2022-413319.3 Critical
- fortinet forticlient, forticlientwindows +1 moreA relative path traversal vulnerability in Fortinet FortiClient (Windows) 7.0.0 - 7.0.7, 6.4.0 -...CVE-2022-424707.1 High
- fortinet forticlient, forticlientwindows +1 moreA incorrect authorization in Fortinet FortiClient (Windows) 7.0.0 - 7.0.7, 6.4.0 - 6.4.9, 6.2.0 -...CVE-2022-406827.1 High
- fortinet fortiadc, fortiddos, fortiddos-f +2 moreAn improper neutralization of special elements used in an OS command vulnerability [CWE-78] in...CVE-2022-406797.1 High
- fortinet fortinac, fortinac-f +1 moreAn exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiNAC...CVE-2022-439514.8 Medium
- fortinet fortisoarA improper neutralization of special elements used in a template engine vulnerability in Fortinet...CVE-2023-279957.2 High
- fortinet fortios, fortiproxy +1 moreAn improper neutralization of input during web page generation vulnerability ('Cross-site...CVE-2022-413308.3 High
- fortinet forticlient, forticlientmac +1 moreA download of code without Integrity check vulnerability [CWE-494] in FortiClientMac version 7.0...CVE-2023-226356.9 Medium
- fortinet fortideceptorA improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet...CVE-2023-26209Public exploit3.5 Low
- fortinet fortiauthenticatorA improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet...CVE-2023-26208Public exploit3.5 Low
- fortinet fortimailA improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet...CVE-2022-29056Public exploit3.5 Low
- fortinet fortios, fortiproxy +1 moreAn exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet...CVE-2022-413295.2 Medium
- fortinet fortios, fortiproxy +1 moreA relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2,...CVE-2022-424767.8 High
- fortinet fortios, fortiproxy +1 moreAn access of uninitialized pointer vulnerability [CWE-824] in the SSL VPN portal of Fortinet...CVE-2022-458616.4 Medium
- fortinet fortianalyzer, fortimanager, fortiportal +1 more +3 moreA exposure of sensitive information to an unauthorized actor in Fortinet FortiManager version 6.0...CVE-2022-274905.1 Medium
- fortinet fortinacA improper neutralization of input during web page generation ('cross-site scripting') in...CVE-2022-406767.1 High
- fortinet fortiosA improper limitation of a pathname to a restricted directory vulnerability ('path traversal') ...CVE-2022-41328In KEVEPSS 10.7%6.5 Medium
- fortinet fortirecorder, fortiweb, fortirecorder firmware +2 moreAn incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in...CVE-2022-222975.2 Medium
- fortinet fortianalyzerAn exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in...CVE-2023-237764.6 Medium
- fortinet fortirecorder, fortirecorder firmware +1 moreAn uncontrolled resource consumption vulnerability [CWE-400] in FortiRecorder version 6.4.3 and...CVE-2022-41333Public exploit6.8 Medium
- fortinet fortinacA improper privilege management in Fortinet FortiNAC version 9.4.0 through 9.4.1, FortiNAC...CVE-2022-399537.8 High
- fortinet fortiwebA improper neutralization of special elements used in an os command ('os command injection') in...CVE-2022-399517.2 High
- fortinet fortianalyzerA improper neutralization of formula elements in a CSV file vulnerability in Fortinet...CVE-2023-256114.0 Medium
- fortinet fortisoarA improper access control vulnerability in Fortinet FortiSOAR 7.3.0 - 7.3.1 allows an attacker...CVE-2023-256057.5 High
- fortinet fortiwebAn unauthorized configuration download vulnerability in FortiWeb 6.3.6 through 6.3.21, 6.4.0...CVE-2023-226366.6 Medium
- fortinet fortiwanAn improper neutralization of special elements used in an OS command vulnerability [CWE-78] in...CVE-2022-338698.0 High
- fortinet fortios, fortiproxy +1 moreA missing cryptographic steps vulnerability [CWE-325] in the functions that encrypt the DHCP and...CVE-2022-290543.1 Low
- fortinet fortisandboxA use of password hash with insufficient computational effort vulnerability [CWE-916] in...CVE-2022-261155.4 Medium
- fortinet fortinacSeveral improper neutralization of inputs during web page generation vulnerability [CWE-79] in...CVE-2023-226386.7 Medium
- fortinet fortiwebA double free in Fortinet FortiWeb version 7.0.0 through 7.0.3 may allows attacker to execute...CVE-2022-406837.1 High
- fortinet fortios, fortiproxy +1 moreA improper neutralization of crlf sequences in http headers ('http response splitting') in...CVE-2022-424724.0 Medium
- fortinet fortinacA improper neutralization of argument delimiters in a command ('argument injection') in Fortinet...CVE-2022-406777.2 High
- fortinet fortinacA external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5,...CVE-2022-39952Public exploitEPSS 99.8%9.8 Critical
- fortinet fortinac, fortinac-f +1 moreSome cryptographic issues in Fortinet FortiNAC versions 9.4.0 through 9.4.1, 9.2.0 through 9.2.7,...CVE-2022-406756.0 Medium
- fortinet fortinac, fortinac-f +1 moreAn improper restriction of xml external entity reference in Fortinet FortiNAC version 9.4.0...CVE-2022-399546.9 Medium
- fortinet fortinacAn insufficiently protected credentials in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5,...CVE-2022-406787.4 High
- Show moreLoading…