Skip to contentFortinet vulnerabilities
Products
Show 102 moreShow less
Newest
- fortinet fortianalyzer, fortimanager, fortianalyzer big data +2 moreAn authorization bypass through user-controlled key [CWE-639] vulnerability in FortiAnalyzer...CVE-2023-442544.7 Medium
- fortinet fortiedr manager, fortiedrmanager +1 moreAn improper access control vulnerability [CWE-284] in FortiEDR Manager API 6.2.0 through 6.2.2, 6...CVE-2024-453234.6 Medium
- fortinet fortianalyzer, fortimanager +1 moreA unverified password change in Fortinet FortiManager versions 7.0.0 through 7.0.10, versions 7.2...CVE-2024-217575.5 Medium
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreAn insufficient session expiration vulnerability [CWE-613] vulnerability in FortiOS 7.2.5 and...CVE-2022-458623.5 Low
- fortinet fortiddos, fortiddos-f +1 moreA improper neutralization of special elements used in an os command ('os command injection') in...CVE-2022-274865.9 Medium
- fortinet fortiosAn improper access control vulnerability [CWE-284] in FortiOS 7.4.0 through 7.4.3, 7.2.5 through...CVE-2024-365054.7 Medium
- fortinet fortisoarAn improper neutralization of input during web page generation ('cross-site scripting') in...CVE-2023-262116.4 Medium
- fortinet fortiadcAn improper certificate validation vulnerability [CWE-295] in FortiADC 7.4.0, 7.2.0 through 7.2.3...CVE-2023-501787.2 High
- fortinet fortiextender, fortiextender firmware +1 moreAn improper access control in Fortinet FortiExtender 4.1.1 - 4.1.9, 4.2.0 - 4.2.6, 5.3.2, 7.0.0 -...CVE-2024-236638.1 High
- fortinet fortiportalAn authorization bypass through user-controlled key in Fortinet FortiPortal version 7.2.0, and...CVE-2024-217593.9 Low
- fortinet fortiadcAn improper access control vulnerability [CWE-284] in Fortinet FortiADC version 7.4.0 through 7...CVE-2023-501814.8 Medium
- fortinet fortiaiopsMultiple insufficient session expiration vulnerabilities [CWE-613] in FortiAIOps version 2.0.0...CVE-2024-277827.7 High
- fortinet fortios, fortiproxy +1 moreAn incorrect parsing of numbers with different radices vulnerability [CWE-1389] in FortiProxy...CVE-2024-260153.1 Low
- fortinet fortiaiopsAn improper neutralization of formula elements in a CSV File vulnerability [CWE-1236] in...CVE-2024-277855.1 Medium
- fortinet fortiaiopsMultiple Exposure of sensitive information to an unauthorized actor vulnerabilities [CWE-200] in...CVE-2024-277848.3 High
- fortinet fortiaiopsMultiple cross-site request forgery (CSRF) vulnerabilities [CWE-352] in FortiAIOps version 2.0.0...CVE-2024-277837.2 High
- fortinet fortiadcAn improper certificate validation vulnerability [CWE-295] in FortiADC 7.4.0, 7.2 all versions, 7...CVE-2023-501794.7 Medium
- fortinet fortiwebAn improper certificate validation vulnerability [CWE-295] in FortiWeb 7.2.0 through 7.2.1, 7.0...CVE-2024-335094.4 Medium
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreA stack-based buffer overflow in Fortinet FortiPAM version 1.2.0, 1.1.0 through 1.1.2, 1.0.0...CVE-2024-260106.7 Medium
- fortinet fortios, fortiproxy +1 moreA use of password hash with insufficient computational effort vulnerability [CWE-916] affecting...CVE-2024-21754Public exploit1.7 Low
- fortinet fortios, fortiproxy +1 moreA use of password hash with insufficient computational effort vulnerability [CWE-916] affecting...CVE-2024-231116.2 Medium
- fortinet fortiosA stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7...CVE-2023-467206.3 Medium
- fortinet fortisoarMultiple improper neutralization of special elements used in SQL commands ('SQL Injection')...CVE-2023-237755.9 Medium
- fortinet fortiosA stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.2, 7.2.0 through 7.2...CVE-2024-231107.4 High
- fortinet fortiportalA improper neutralization of special elements used in an sql command ('sql injection') in...CVE-2024-314953.9 Low
- fortinet fortiwebmanager, fortiweb manager +1 moreAn improper authorization in Fortinet FortiWebManager version 7.2.0 and 7.0.0 through 7.0.4 and 6...CVE-2024-236696.4 Medium
- fortinet fortiwebMultiple improper authorization vulnerabilities [CWE-285] in FortiWeb version 7.4.2 and below,...CVE-2024-236655.6 Medium
- fortinet fortiauthenticatorA URL redirection to untrusted site ('open redirect') in Fortinet FortiAuthenticator version 6.6...CVE-2024-236645.8 Medium
- fortinet fortiwebmanager, fortiweb manager +1 moreAn improper authorization in Fortinet FortiWebManager version 7.2.0 and 7.0.0 through 7.0.4 and 6...CVE-2024-236677.6 High
- fortinet fortiwebmanager, fortiweb manager +1 moreAn improper authorization in Fortinet FortiWebManager version 7.2.0 and 7.0.0 through 7.0.4 and 6...CVE-2024-236688.6 High
- fortinet fortiwebmanager, fortiweb manager +1 moreAn improper authorization in Fortinet FortiWebManager version 7.2.0 and 7.0.0 through 7.0.4 and 6...CVE-2024-236707.6 High
- fortinet fortiportalA client-side enforcement of server-side security in Fortinet FortiPortal version 6.0.0 through 6...CVE-2023-487894.1 Medium
- fortinet fortisoarAn improper removal of sensitive information before storage or transfer vulnerability [CWE-212]...CVE-2024-314936.0 Medium
- fortinet fortiwebAn exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiWeb...CVE-2024-231075.2 Medium
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreA use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.4,...CVE-2023-366406.2 Medium
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreA use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.5,...CVE-2023-455836.2 Medium
- fortinet fortiportalA Use Of Less Trusted Source [CWE-348] vulnerability in Fortinet FortiPortal version 7.0.0...CVE-2024-231057.1 High
- fortinet fortiadcAn exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE...CVE-2023-501805.2 Medium
- fortinet fortiosA stack-based buffer overflow [CWE-121] vulnerability in Fortinet FortiOS version 7.2.1 through 7...CVE-2023-467146.8 Medium
- fortinet fortiosA double free vulnerability [CWE-415] in Fortinet FortiOS before 7.0.0 may allow a privileged...CVE-2023-442476.5 Medium
- fortinet fortivoiceAn authorization bypass through user-controlled key vulnerability [CWE-639] in...CVE-2023-407206.7 Medium
- fortinet fortios, fortiproxy +1 moreAn insufficient verification of data authenticity vulnerability [CWE-345] in Fortinet FortiOS SSL...CVE-2023-455864.7 Medium
- fortinet fortinacAn improper neutralization of inputs during web page generation vulnerability [CWE-79] in...CVE-2024-314886.1 Medium
- fortinet fortiosAn improper check or handling of exceptional conditions vulnerability [CWE-703] in Fortinet...CVE-2024-260075.0 Medium
- fortinet fortisandboxA client-side enforcement of server-side security in Fortinet FortiSandbox version 4.4.0 through...CVE-2024-314918.6 High
- ietf dhcp, cisco anyconnect vpn client, secure client +7 more +9 moreDHCP routing options can manipulate interface-based VPN trafficCVE-2024-3661Public exploitFix available7.6 High
- fortinet forticlient, forticlientmac +1 moreAn external control of file name or path vulnerability [CWE-73] in FortiClientMac version 7.2.3...CVE-2024-314927.8 High
- fortinet fortisandboxA improper neutralization of special elements used in an os command ('os command injection') in...CVE-2024-217558.6 High
- fortinet fortisandboxA improper neutralization of special elements used in an os command ('os command injection') in...CVE-2024-217568.6 High
- fortinet fortiosA use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.1 and...CVE-2023-487846.1 Medium
- Show moreLoading…