Skip to contentFortinet vulnerabilities
Products
Show 102 moreShow less
Newest
- fortinet fortimanagerA improper neutralization of special elements used in a template engine [CWE-1336] in...CVE-2023-475426.3 Medium
- fortinet fortisandboxAn improper neutralization of special elements used in an os command ('os command injection') in...CVE-2023-475406.5 Medium
- fortinet fortisandboxA improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet...CVE-2024-314875.8 Medium
- fortinet fortios, fortiproxy +1 moreA insufficiently protected credentials in Fortinet FortiProxy 7.4.0, 7.2.0 through 7.2.6, 7.0.0...CVE-2023-416777.5 High
- fortinet fortisandboxA improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet...CVE-2024-236717.9 High
- fortinet fortisandboxAn improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet...CVE-2023-475416.5 Medium
- fortinet forticlient, forticlientlinux +1 moreAn improper control of generation of code ('code injection') in Fortinet FortiClientLinux version...CVE-2023-455909.4 Critical
- fortinet fortiosAn exposure of sensitive information to an unauthorized actor in Fortinet FortiOS at least...CVE-2024-236625.0 Medium
- fortinet forticlientems, forticlient endpoint management server +1 moreA improper neutralization of formula elements in a csv file in Fortinet FortiClientEMS version 7...CVE-2023-475348.7 High
- fortinet fortiosAn improper authentication vulnerability [CWE-287] in FortiOS versions 7.4.1 and below, versions...CVE-2023-467176.7 Medium
- fortinet forticlientems, forticlient ems, forticlient enterprise management server +2 moreA improper neutralization of special elements used in an sql command ('sql injection') in...CVE-2023-48788In KEVPublic exploitEPSS 98.4%9.3 Critical
- fortinet fortios, fortiproxy, fortisase +1 more +3 moreA out-of-bounds write in Fortinet FortiOS 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0.0 through...CVE-2023-42789Public exploit9.3 Critical
- fortinet fortios, fortiproxy +1 moreAn authorization bypass through user-controlled key vulnerability [CWE-639] in FortiOS version 7...CVE-2024-231127.2 High
- fortinet fortios, fortiproxy +1 moreA stack-based buffer overflow in Fortinet FortiOS 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0.0...CVE-2023-427907.7 High
- fortinet fortiportalAn improper authorization vulnerability [CWE-285] in FortiPortal version 7.2.0, and versions 7.0...CVE-2024-217613.9 Low
- fortinet fortimanager, fortianalyzer, fortianalyzer-bigdata +2 more +4 moreA use of externally-controlled format string vulnerability [CWE-134] in Fortinet FortiManager...CVE-2023-418426.3 Medium
- fortinet fortimanagerA improper access control in Fortinet FortiManager version 7.4.0, version 7.2.0 through 7.2.3,...CVE-2023-365547.7 High
- fortinet fortios, fortiproxy +1 moreA null pointer dereference in Fortinet FortiOS version 7.2.0 through 7.2.4, 7.0.0 through 7.0.11,...CVE-2023-291807.3 High
- fortinet fortios, fortiproxy +1 moreA null pointer dereference in Fortinet FortiOS version 7.2.0 through 7.2.4, 7.0.0 through 7.0.11,...CVE-2023-291796.4 Medium
- fortinet fortios, fortipam, fortiproxy +2 moreA use of externally-controlled format string in Fortinet FortiOS 7.2.0 through 7.2.4, 7.0.0...CVE-2023-291818.3 High
- fortinet fortimanager, fortianalyzer +1 moreA relative path traversal in Fortinet FortiManager version 7.4.0 and 7.2.0 through 7.2.3 and 7.0...CVE-2023-42791Public exploit8.6 High
- fortinet fortios, fortipam, fortiproxy +2 more +4 moreA use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7...CVE-2024-23113In KEVPublic exploitEPSS 61.7%9.8 Critical
- fortinet fortiosAn improper certificate validation vulnerability in Fortinet FortiOS 7.0.0 - 7.0.13, 7.2.0 - 7.2...CVE-2023-475374.4 Medium
- fortinet fortianalyzer, fortimanager +1 moreAn exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet...CVE-2023-442534.7 Medium
- fortinet forticlientems, forticlient enterprise management server +1 moreAn improper privilege management vulnerability [CWE-269] in Fortinet FortiClientEMS version 7.2.0...CVE-2023-455817.9 High
- fortinet fortinacAn improper neutralization of input during web page generation ('cross-site scripting') in...CVE-2023-262066.8 Medium
- fortinet fortios, fortiproxy +1 moreA out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0...CVE-2024-21762In KEVPublic exploitEPSS 84.6%9.6 Critical
- fortinet fortisiemAn improper neutralization of special elements used in an os command ('os command injection') in...CVE-2024-23108Public exploitEPSS 80.3%9.7 Critical
- fortinet fortisiemAn improper neutralization of special elements used in an os command ('os command injection') in...CVE-2024-231099.7 Critical
- fortinet fortiportalAn Authorization Bypass Through User-Controlled Key vulnerability [CWE-639] affecting PortiPortal...CVE-2023-48783EPSS 22.2%4.9 Medium
- fortinet fortiportalA improper access control in Fortinet FortiPortal version 7.0.0 through 7.0.6, Fortinet...CVE-2023-467126.3 Medium
- fortinet fortios, fortiproxy +1 moreAn improper privilege management vulnerability [CWE-269] in a Fortinet FortiOS HA cluster version...CVE-2023-442508.3 High
- fortinet fortipamAn allocation of resources without limits or throttling vulnerability [CWE-770] in FortiPAM 1.0...CVE-2023-379344.2 Medium
- fortinet fortivoiceAn improper limitation of a pathname to a restricted directory ('path traversal') vulnerability ...CVE-2023-379326.2 Medium
- fortinet fortiwan** UNSUPPORTED WHEN ASSIGNED **An improper authentication vulnerability [CWE-287] in Fortinet...CVE-2023-442528.6 High
- fortinet fortiwan** UNSUPPORTED WHEN ASSIGNED **A improper limitation of a pathname to a restricted directory (...CVE-2023-442518.1 High
- fortinet fortios, fortiproxy +1 moreAn improper access control vulnerability [CWE-284] in FortiOS version 7.2.0, version 7.0.13 and...CVE-2023-475362.8 Low
- fortinet fortiportalAn improper neutralization of special elements used in a command ('Command Injection')...CVE-2023-487917.9 High
- fortinet fortios, fortipam +1 moreA double free in Fortinet FortiOS versions 7.0.0 through 7.0.5, FortiPAM version 1.0.0 through 1...CVE-2023-416788.3 High
- fortinet fortitesterAn improper neutralization of special elements used in an OS command vulnerability [CWE-78] in...CVE-2023-407166.5 Medium
- fortinet fortiadcAn improper authorization vulnerability [CWE-285] in Fortinet FortiADC version 7.4.0 and before 7...CVE-2023-416736.9 Medium
- fortinet fortios, fortipam, fortiproxy +2 moreA use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.4,...CVE-2023-366397.0 High
- fortinet fortisandboxA improper neutralization of input during web page generation ('cross-site scripting') in...CVE-2023-418443.4 Low
- fortinet fortiwebAn improper output neutralization for logs in Fortinet FortiWeb 6.2.0 - 6.2.8, 6.3.0 - 6.3.23, 7...CVE-2023-467134.9 Medium
- fortinet fortisandboxAn improper neutralization of input during web page generation ('cross-site scripting') in...CVE-2023-455873.4 Low
- fortinet fortimail, fortindr, fortirecorder +3 more +5 moreA cross-site request forgery (CSRF) in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x,...CVE-2022-274887.5 High
- fortinet fortiwlmA improper neutralization of special elements used in an os command ('os command injection') in...CVE-2023-487828.6 High
- fortinet forticlient, forticlientwindows +1 moreA incorrect authorization in Fortinet FortiClient (Windows) 7.0.0 - 7.0.7, 6.4.0 - 6.4.9, 6.2.0 -...CVE-2022-406817.1 High
- fortinet fortiadc, fortiddos-f +1 moreA permissive cross-domain policy with untrusted domains vulnerability in Fortinet FortiADC 7.1.0 ...CVE-2023-256035.4 Medium
- fortinet fortianalyzer, fortimanager +1 moreA use of hard-coded credentials vulnerability in Fortinet FortiAnalyzer and FortiManager 7.0.0 -...CVE-2023-407194.1 Medium
- Show moreLoading…