Skip to contentFortinet vulnerabilities
Products
Show 102 moreShow less
Newest
- fortinet fortianalyzer, fortianalyzer cloud, fortimanager +1 more +3 moreA stack-based buffer overflow in Fortinet FortiAnalyzer versions 7.4.0 through 7.4.3, 7.2.0...CVE-2024-352765.0 Medium
- fortinet fortianalyzer, fortimanager, fortianalyzer cloud +1 more +3 moreA improper neutralization of special elements used in an sql command ('sql injection') in...CVE-2024-352756.5 Medium
- fortinet fortiosA null pointer dereference in FortiOS versions 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0 all...CVE-2023-427856.4 Medium
- fortinet fortianalyzer, fortimanager +1 moreAn improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet...CVE-2024-365127.0 High
- fortinet fortios, fortipam, fortiproxy +2 moreAn Out-of-bounds Read vulnerability [CWE-125] in FortiOS version 7.6.0, version 7.4.4 and below,...CVE-2024-466707.5 High
- fortinet fortiosAn Integer Overflow or Wraparound vulnerability [CWE-190] in version 7.4.4 and below, version 7.2...CVE-2024-466693.2 Low
- fortinet fortiwebA improper neutralization of special elements used in an sql command ('sql injection') in...CVE-2024-555932.6 Low
- fortinet fortimanager, fortimanager cloud +1 moreA improper neutralization of special elements used in an os command ('os command injection') in...CVE-2024-505667.2 High
- fortinet fortios, fortiproxy, fortios and fortiproxy +2 moreAn Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting...CVE-2024-55591In KEVPublic exploitEPSS 94.3%9.6 Critical
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreA out-of-bounds write in Fortinet FortiOS versions 7.6.0, 7.4.0 through 7.4.6, 7.2.0 through 7.2...CVE-2024-529633.5 Low
- fortinet fortisoarAn improper neutralization of input during web page generation vulnerability [CWE-79] in...CVE-2024-488936.4 Medium
- fortinet fortiosAn insertion of sensitive information into sent data vulnerability [CWE-201] in FortiOS 7.6.0, 7...CVE-2024-466653.5 Low
- fortinet fortiwanA relative path traversal vulnerability (CWE-23) in FortiWAN version 4.5.7 and below, 4.4 all...CVE-2021-26102Public exploitEPSS 19.7%9.8 Critical
- fortinet fortianalyzer, fortimanager, fortiportal +2 moreA use after free in Fortinet FortiManager, FortiAnalyzer allows attacker to execute unauthorized...CVE-2021-325897.7 High
- fortinet fortiwanAn OS command injection (CWE-78) vulnerability in FortiWAN version 4.5.7 and below Command Line...CVE-2021-261157.6 High
- fortinet forticlient, forticlientlinux +1 moreAn execution with unnecessary privileges vulnerability in the VCM engine of FortiClient for Linux...CVE-2020-159348.6 High
- fortinet fortiosUnder non-default configuration, a stack-based buffer overflow in FortiOS version 6.0.10 and...CVE-2020-128205.4 Medium
- fortinet fortiwlcAn access of uninitialized pointer (CWE-824) vulnerability in FortiWLC versions 8.6.0, 8.5.3 and...CVE-2021-260936.6 Medium
- fortinet fortiosA heap-based buffer overflow vulnerability in the processing of Link Control Protocol messages in...CVE-2020-128195.4 Medium
- fortinet forticlient, forticlientlinux, forticlientwindows +1 more +3 moreA Cleartext Storage of Sensitive Information vulnerability [CWE-312] in FortiClientWindows 7.4.0...CVE-2024-505704.9 Medium
- fortinet fortimanager, fortimanager cloud +1 moreAn Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')...CVE-2024-488897.2 High
- fortinet fortiwlmA relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5...CVE-2023-34990EPSS 25.0%9.6 Critical
- fortinet forticlient, forticlientwindows +1 moreA authentication bypass using an alternate path or channel in Fortinet FortiClientWindows version...CVE-2024-475747.4 High
- fortinet fortiwebAn exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE...CVE-2024-365093.8 Low
- fortinet fortianalyzer, fortimanager, fortianalyzer big data +2 moreA stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiManager version 7.4.0...CVE-2024-314966.3 Medium
- fortinet fortianalyzer, fortimanager, fortianalyzer big data +2 moreAn improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability ...CVE-2024-352742.2 Low
- fortinet fortianalyzer, fortimanager, fortimanager cloud +2 moreA heap-based buffer overflow in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, 7.2.0 through...CVE-2024-335055.3 Medium
- fortinet fortianalyzer, fortimanager, fortianalyzer big data +2 moreMultiple improper neutralization of special elements used in an OS command ('OS Command Injection...CVE-2024-321186.3 Medium
- fortinet fortimanager, fortios, fortipam +3 more +5 moreA missing authentication for critical function in Fortinet FortiManager version 7.4.0 through 7.4...CVE-2024-260115.2 Medium
- fortinet fortianalyzer, fortimanager, fortianalyzer big data +2 moreMultiple relative path traversal vulnerabilities [CWE-23] in Fortinet FortiManager version 7.4.0...CVE-2024-321164.8 Medium
- fortinet fortianalyzer, fortimanager, fortianalyzer big data +2 moreAn exposure of sensitive information to an unauthorized actor [CWE-200] in Fortinet FortiManager...CVE-2023-442553.9 Low
- fortinet fortiportalAn authorization bypass through user-controlled key vulnerability [CWE-639] in Fortinet...CVE-2023-475435.1 Medium
- fortinet fortianalyzer, fortimanager, fortianalyzer big data +2 moreAn improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability ...CVE-2024-321174.7 Medium
- fortinet forticlient, forticlientmac +1 moreAn improper verification of cryptographic signature vulnerability [CWE-347] in FortiClient MacOS...CVE-2024-405926.8 Medium
- fortinet forticlient, forticlientwindows +1 moreA untrusted search path in Fortinet FortiClientWindows versions 7.4.0, versions 7.2.4 through 7.2...CVE-2024-365076.7 Medium
- fortinet fortios, fortiproxy +1 moreAn improper neutralization of special elements in output used by a downstream component (...CVE-2024-335103.6 Low
- fortinet fortiosA session fixation in Fortinet FortiOS version 7.4.0 through 7.4.3 and 7.2.0 through 7.2.7 and 7...CVE-2023-501764.0 Medium
- fortinet fortianalyzer, fortimanager, fortianalyzer big data +2 moreA client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigData
at least...CVE-2024-23666Public exploit7.1 High
- fortinet forticlient, forticlientwindows +1 moreA privilege context switching error vulnerability [CWE-270] in FortiClient Windows version 7.2.4...CVE-2024-365137.4 High
- fortinet fortimanager, fortimanager cloud +1 moreA missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through...CVE-2024-47575In KEVPublic exploitEPSS 94.8%9.8 Critical
- fortinet fortianalyzer, fortianalyzer cloud +1 moreA use of externally-controlled format string in Fortinet FortiAnalyzer versions 7.4.0 through 7.4...CVE-2024-453306.8 Medium
- fortinet fortimanagerAn exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in...CVE-2024-335063.1 Low
- fortinet fortisoarAn improper authorization vulnerability [CWE-285] in FortiSOAR version 7.4.0 through 7.4.3, 7.3.0...CVE-2024-453277.1 High
- fortinet forticlient, forticlientlinux, forticlientmac +2 more +4 moreAAn improper certificate validation vulnerability [CWE-295] in FortiClientWindows 7.2.0 through 7...CVE-2024-314896.4 Medium
- fortinet forticlientems, forticlient endpoint management server +1 moreA improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet...CVE-2024-217535.5 Medium
- fortinet forticlient, forticlientandroid, forticlientios +3 more +5 moreAn improper certificate validation vulnerability [CWE-295] in FortiClientWindows 6.4 all versions...CVE-2022-458564.6 Medium
- fortinet fortiadcAn improperly implemented security check for standard vulnerability [CWE-358] in FortiADC Web...CVE-2024-365113.4 Low
- fortinet forticlient, forticlientios +1 moreA cleartext storage of sensitive information in memory vulnerability [CWE-316] affecting...CVE-2024-352823.9 Low
- fortinet forticlientems, forticlient endpoint management server, forticlient enterprise management server +2 moreAn improper neutralization of special elements used in a command ('Command Injection')...CVE-2024-335086.9 Medium
- fortinet fortisandboxAn exposure of sensitive information to an unauthorized actor in Fortinet FortiSandbox version 4...CVE-2024-314904.2 Medium
- Show moreLoading…