Skip to contentFortinet vulnerabilities
Products
Show 102 moreShow less
Newest
- fortinet forticlient, forticlientwindows +1 moreAn Improper Access Control vulnerability [CWE-284] in FortiClient Windows version 7.4.0, version...CVE-2024-40586Public exploit6.3 Medium
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreA use of externally-controlled format string vulnerability [CWE-134] in Fortinet FortiOS version...CVE-2023-407216.3 Medium
- fortinet fortiwebAn improper neutralization of special elements used in an os command ('os command injection') in...CVE-2024-505676.8 Medium
- fortinet fortimanager, fortimanager cloud +1 moreA use of hard-coded cryptographic key to encrypt sensitive data vulnerability [CWE-321] in...CVE-2024-335043.9 Low
- fortinet fortiosAn incorrect privilege assignment vulnerability [CWE-266] in Fortinet FortiOS version 7.6.0, 7.4...CVE-2024-405918.0 High
- fortinet fortiosA stack-based buffer overflow [CWE-121] vulnerability in Fortinet FortiOS version 7.2.4 through 7...CVE-2024-352797.7 High
- fortinet fortianalyzerAn exposure of sensitive information to an unauthorized actor in Fortinet FortiAnalyzer 6.4.0...CVE-2024-529662.2 Low
- fortinet forticlient, forticlientmac +1 moreAn improper authentication in Fortinet FortiClientMac 7.0.11 through 7.2.4 allows attacker to...CVE-2024-529685.8 Medium
- fortinet fortiwebA improper neutralization of special elements used in an os command ('os command injection') in...CVE-2024-505696.3 Medium
- fortinet fortiportalAn Improper Resolution of Path Equivalence vulnerability [CWE-41] in FortiPortal 7.4.0 through 7...CVE-2025-244708.1 High
- fortinet fortimanager, fortiadc, fortianalyzer +15 more +17 moreA externally controlled reference to a resource in another sphere in Fortinet FortiManager before...CVE-2022-234394.1 Medium
- fortinet fortianalyzer, fortianalyzer cloud, fortimanager +1 more +3 moreA weak authentication in Fortinet FortiManager Cloud, FortiAnalyzer versions 7.6.0 through 7.6.1,...CVE-2024-505636.7 Medium
- fortinet fortirecorder, fortivoice, fortiweb +2 moreA improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet...CVE-2024-488855.2 Medium
- fortinet fortianalyzer, fortianalyzer cloud, fortimanager +1 more +3 moreA incorrect privilege assignment in Fortinet FortiAnalyzer versions 7.4.0 through 7.4.3, 7.2.0...CVE-2024-453316.9 Medium
- fortinet fortideceptorA improper neutralization of input during web page generation ('cross-site scripting') in...CVE-2024-352805.1 Medium
- fortinet fortimanagerA relative path traversal vulnerability [CWE-23] in Fortinet FortiManager version 7.4.0 through...CVE-2024-321155.2 Medium
- fortinet fortimanagerAn operation on a resource after expiration or release in Fortinet FortiManager 6.4.12 through 7...CVE-2024-475717.9 High
- fortinet forticlientemsAn improper restriction of excessive authentication attempts [CWE-307] in FortiClientEMS version...CVE-2024-231067.7 High
- fortinet fortivoiceAn improper neutralization of special elements used in an sql command ('sql injection')...CVE-2023-379318.6 High
- fortinet fortisoarAn improper neutralization of formula elements in a csv file in Fortinet FortiSOAR 7.2.1 through...CVE-2024-475728.3 High
- fortinet fortisiemA allocation of resources without limits or throttling in Fortinet FortiSIEM 5.3 all versions, 5...CVE-2024-466676.9 Medium
- fortinet fortiosAn out-of-bounds read vulnerability [CWE-125] in FortiOS SSLVPN web portal versions 7.4.0 through...CVE-2024-365046.2 Medium
- fortinet fortiosAn allocation of resources without limits or throttling [CWE-770] vulnerability in FortiOS...CVE-2024-466664.8 Medium
- fortinet fortiwebA stack-based buffer overflow in Fortinet FortiWeb versions 7.2.0 through 7.2.7, and 7.4.0...CVE-2024-217586.1 Medium
- fortinet fortideceptorAn Improper Access Control vulnerability [CWE-284] in FortiDeceptor version 6.0.0, version 5.3.3...CVE-2024-453263.9 Low
- fortinet fortimanager, fortimanager cloud +1 moreA missing authentication for critical function in Fortinet FortiPortal version 6.0.0 through 6.0...CVE-2024-352778.4 High
- fortinet fortiap, fortiap-s, fortiap-w2 +2 moreA improper neutralization of special elements used in an os command ('os command injection') in...CVE-2024-260126.3 Medium
- fortinet forticlientems, forticlientems cloud +1 moreAn improper verification of source of a communication channel vulnerability [CWE-940] in...CVE-2024-365063.5 Low
- fortinet fortisoar, fortisoar imap connector +1 moreAn improper neutralization of special elements used in an OS command ('OS Command Injection')...CVE-2024-488906.3 Medium
- fortinet fortianalyzer, fortimanager +1 moreAn improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet...CVE-2024-335026.4 Medium
- fortinet forticlient, forticlientwindows +1 moreA use of hard-coded cryptographic key in Fortinet FortiClientWindows version 7.4.0, 7.2.x all...CVE-2024-505643.2 Low
- fortinet forticlientems, fortisoar +1 moreAn observable response discrepancy vulnerability [CWE-204] in FortiClientEMS 7.4.0, 7.2.0 through...CVE-2024-365104.9 Medium
- fortinet fortios, fortiproxy +1 moreAn improper neutralization of crlf sequences in http headers ('http response splitting') in...CVE-2024-540216.4 Medium
- fortinet fortiportalA improper neutralization of special elements used in an sql command ('sql injection') in...CVE-2024-352784.1 Medium
- fortinet fortiportalAn improper neutralization of script-related html tags in a web page (basic xss) in Fortinet...CVE-2024-529673.3 Low
- fortinet fortirecorderA relative path traversal in Fortinet FortiRecorder [CWE-23] version 7.2.0 through 7.2.1 and...CVE-2024-466645.2 Medium
- fortinet fortivoiceAn improper neutralization of special elements used in an OS command ('OS Command Injection')...CVE-2024-405876.3 Medium
- fortinet fortirecorderA improper limitation of a pathname to a restricted directory ('path traversal') [CWE-23] in...CVE-2024-475664.8 Medium
- fortinet fortianalyzer, fortianalyzer cloud, fortimanager +3 more +5 moreA weak authentication in Fortinet FortiOS versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0...CVE-2024-488868.0 High
- fortinet fortisandboxAn improper neutralization of special elements used in an OS Command vulnerability [CWE-78] in...CVE-2024-277788.3 High
- fortinet fortimanager, fortimanager cloud, fortianalyzer +1 more +3 moreA improper privilege management in Fortinet FortiManager version 7.4.0 through 7.4.3, 7.2.0...CVE-2024-335036.7 Medium
- fortinet fortiswitchAn improper neutralization of special elements used in an os command ('os command injection') in...CVE-2023-379377.6 High
- fortinet fortiswitchA use of hard-coded cryptographic key in Fortinet FortiSwitch version 7.4.0 and 7.2.0 through 7.2...CVE-2023-379369.6 Critical
- fortinet fortimail, fortirecorder +1 moreAn improper neutralization of special elements used in an os command ('os command injection') in...CVE-2024-564976.5 Medium
- fortinet fortimanager, fortimanager cloud, fortios +4 more +6 moreA improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet...CVE-2024-48884EPSS 15.2%6.7 Medium
- fortinet fortisiemAn Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...CVE-2024-529693.7 Low
- fortinet fortiosAn allocation of resources without limits or throttling vulnerability [CWE-770] in FortiOS...CVE-2024-466687.1 High
- fortinet fortianalyzer, fortimanager, fortianalyzer cloud +1 more +3 moreA out-of-bounds write in Fortinet FortiManager version 7.4.0 through 7.4.2, FortiAnalyzer version...CVE-2024-352737.0 High
- fortinet fortios, fortiproxy +1 moreAn origin validation error [CWE-346] vulnerability in Fortinet FortiOS IPSec VPN version 7.4.0...CVE-2023-467154.7 Medium
- fortinet fortiosA null pointer dereference in FortiOS versions 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0 all...CVE-2023-427866.4 Medium
- Show moreLoading…