Skip to contentFortinet vulnerabilities
Products
Show 102 moreShow less
Newest
- fortinet forticlientems, forticlient endpoint management server +1 moreAn exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in...CVE-2021-441723.6 Low
- fortinet fortiadcAn improper neutralization of special elements used in an OS command vulnerability [CWE-78] in...CVE-2022-358497.4 High
- fortinet fortios, fortiproxy +1 moreAn improper neutralization of input during web page generation ('Cross-site Scripting')...CVE-2023-291837.3 High
- fortinet fortitesterA cleartext storage of sensitive information vulnerability [CWE-312] in FortiTester 2.3.0 through...CVE-2023-407155.2 Medium
- fortinet fortitesterA use of hard-coded credentials vulnerability [CWE-798] in FortiTester 2.3.0 through 7.2.3 may...CVE-2023-407175.0 Medium
- fortinet fortianalyzer, fortimanager +1 moreAn improper privilege management vulnerability [CWE-269] in FortiManager 7.2.0 through 7.2.2, 7.0...CVE-2023-366384.2 Medium
- fortinet fortiap-uAn incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in...CVE-2023-366346.5 Medium
- fortinet fortitesterAn improper neutralization of special elements used in an OS command vulnerability [CWE-78] in...CVE-2023-366426.5 Medium
- fortinet fortiwebA protection mechanism failure in Fortinet FortiWeb 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4...CVE-2023-349847.1 High
- fortinet fortipresenceA lack of custom error pages vulnerability [CWE-756] in FortiPresence versions 1.2.0 through 1.2...CVE-2023-279985.3 Medium
- fortinet fortisiemA exposure of sensitive information to an unauthorized actor in Fortinet FortiSIEM version 6.7.0...CVE-2023-365514.2 Medium
- fortinet fortiap, fortiap-c, fortiap-u +2 more +4 moreAn incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in...CVE-2023-256085.2 Medium
- fortinet fortiswitchmanagerAn improper access control in Fortinet FortiSwitchManager version 7.2.0 through 7.2.2
7.0.0...CVE-2023-366356.9 Medium
- fortinet fortianalyzer, fortimanager, fortios +1 more +3 moreAn improper certificate validation vulnerability [CWE-295] in FortiManager 7.0.1 and below, 6.4.6...CVE-2022-223055.4 Medium
- fortinet fortiosA stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiOS before 7.0.3 allows a...CVE-2023-291826.4 Medium
- fortinet fortios, fortiproxy +1 moreA stack-based overflow vulnerability [CWE-124] in Fortinet FortiOS version 7.0.0 through 7.0.10...CVE-2023-333089.8 Critical
- fortinet fortianalyzer, fortimanager, fortios +1 more +3 moreA buffer copy without checking size of input ('classic buffer overflow') in Fortinet...CVE-2021-430726.3 Medium
- fortinet fortianalyzer, fortimanager +1 moreAn improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability ...CVE-2023-256066.2 Medium
- fortinet fortiosAn insufficient session expiration in Fortinet FortiOS 7.0.0 - 7.0.12 and 7.2.0 - 7.2.4 allows an...CVE-2023-280014.1 Medium
- fortinet fortiextender, fortiextender firmware +1 moreAn improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability ...CVE-2022-234477.3 High
- fortinet fortiauthenticator, fortios +1 moreA clear text storage of sensitive information (CWE-312) vulnerability in both FortiGate version 6...CVE-2022-223025.3 Medium
- fortinet fortiwebAn improper neutralization of special elements used in an OS command ('OS Command Injection')...CVE-2023-237777.2 High
- fortinet fortinacA deserialization of untrusted data in Fortinet FortiNAC below 7.2.1, below 9.4.3, below 9.2.8...CVE-2023-33299EPSS 24.3%9.6 Critical
- fortinet fortios, fortiproxy +1 moreA null pointer dereference in Fortinet FortiOS before 7.2.5 and before 7.0.11, FortiProxy before...CVE-2023-333076.4 Medium
- fortinet fortios, fortiproxy +1 moreA null pointer dereference in Fortinet FortiOS before 7.2.5, before 7.0.11 and before 6.4.13,...CVE-2023-333066.2 Medium
- fortinet fortios, fortiproxy, fortiweb +2 moreA loop with unreachable exit condition ('infinite loop') in Fortinet FortiOS version 7.2.0...CVE-2023-333054.9 Medium
- fortinet fortios, fortiproxy +1 moreA access of uninitialized pointer vulnerability [CWE-824] in Fortinet FortiProxy version 7.2.0...CVE-2023-291783.9 Low
- fortinet fortios, fortiproxy +1 moreAn improper certificate validation vulnerability [CWE-295] in FortiOS 6.2 all versions, 6.4 all...CVE-2023-291754.4 Medium
- fortinet fortiadcAn improper neutralization of special elements used in an OS command vulnerability [CWE-78] in...CVE-2023-280006.3 Medium
- fortinet fortios, fortiproxy, fortios and fortiproxy ssl-vpn +1 more +3 moreA heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version...CVE-2023-27997In KEVPublic exploitEPSS 86.8%9.2 Critical
- fortinet fortiadc, fortiadc manager, fortiadcmanager +2 moreMultiple improper neutralization of special elements used in an os command ('OS Command Injection...CVE-2023-262107.8 High
- fortinet fortisiemA plaintext storage of a password vulnerability [CWE-256] in FortiSIEM 6.7 all versions, 6.6 all...CVE-2023-262043.6 Low
- fortinet fortios, fortiproxy +1 moreAn insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.2.0...CVE-2023-262073.3 Low
- fortinet fortianalyzer, fortimanager +1 moreA server-side request forgery (SSRF) vulnerability [CWE-918] in FortiManager and FortiAnalyzer...CVE-2023-256094.2 Medium
- fortinet fortios, fortiproxy +1 moreA out-of-bounds write in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0...CVE-2023-226396.3 Medium
- fortinet fortinac, fortinac-f +1 moreAn improper permissions, privileges, and access controls vulnerability [CWE-264] in FortiNAC-F 7...CVE-2023-226337.2 High
- fortinet fortios, fortiproxy +1 moreA use of externally-controlled format string in Fortinet FortiOS version 7.2.0 through 7.2.4,...CVE-2022-439536.3 Medium
- fortinet fortisiemA use of a broken or risky cryptographic algorithm [CWE-327] in Fortinet FortiSIEM before 6.7.1...CVE-2022-439495.9 Medium
- fortinet fortisiemAn Improper Restriction of Excessive Authentication Attempts [CWE-307] in FortiSIEM below 7.0.0...CVE-2022-424788.1 High
- fortinet fortios, fortiproxy, fortiswitchmanager +2 moreA relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.3,...CVE-2022-424746.2 Medium
- fortinet fortios, fortiproxy +1 moreA cleartext transmission of sensitive information vulnerability [CWE-319] in Fortinet FortiOS...CVE-2022-413277.6 High
- fortinet fortinacAn access control vulnerability [CWE-284] in FortiNAC version 9.4.2 and below, version 9.2.7 and...CVE-2022-399467.2 High
- fortinet forticlient, forticonverter, forticlientwindows +2 moreAn incorrect default permission [CWE-276] vulnerability in FortiClient (Windows) versions 7.0.0...CVE-2022-338776.8 Medium
- fortinet fortinac, fortinac-f +1 moreAn improper neutralization of input during web page generation ('Cross-site Scripting')...CVE-2023-226375.9 Medium
- fortinet fortinac, fortinac-f +1 moreA use of hard-coded credentials vulnerability [CWE-798] in FortiNAC-F version 7.2.0, FortiNAC...CVE-2023-262036.1 Medium
- fortinet fortinac, fortinac-f +1 moreA weak authentication vulnerability [CWE-1390] in FortiNAC-F version 7.2.0, FortiNAC version 9.4...CVE-2022-458605.0 Medium
- fortinet fortinacA use of a weak cryptographic algorithm vulnerability [CWE-327] in FortiNAC 9.4.1 and below, 9.2...CVE-2022-458583.8 Low
- fortinet fortinac, fortinac-f +1 moreA URL redirection to untrusted site ('Open Redirect') vulnerability [CWE-601] in FortiNAC-F...CVE-2022-439503.9 Low
- fortinet fortinac, fortinac-f +1 moreAn insufficiently protected credentials vulnerability [CWE-522] in FortiNAC-F 7.2.0, FortiNAC 9.4...CVE-2022-458593.9 Low
- fortinet fortiadcA relative path traversal [CWE-23] in Fortinet FortiADC version 7.2.0 and before 7.1.1 allows a...CVE-2023-279935.7 Medium
- Show moreLoading…