Skip to contentFortinet vulnerabilities
Products
Show 102 moreShow less
Newest
- fortinet fortisiemA relative path traversal in Fortinet FortiSIEM versions 7.0.0, 6.7.0 through 6.7.2, 6.6.0...CVE-2023-407149.7 Critical
- fortinet fortimail, fortindr +1 moreA buffer copy without checking size of input ('classic buffer overflow') in Fortinet FortiMail...CVE-2023-333024.5 Medium
- fortinet fortiddos, fortiddos-cm, fortimail +3 more +5 moreAn exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE...CVE-2021-240085.0 Medium
- fortinet forticlientemsAn Improper Neutralization of Input During Web Page Generation in FortiClientEMS version 6.2.0...CVE-2019-161495.4 Medium
- fortinet fortios, fortios-6k7k, fortiproxy +5 more +7 moreA buffer underwrite ('buffer underflow') vulnerability in the administrative interface of...CVE-2023-25610Public exploitEPSS 18.3%9.3 Critical
- fortinet fortimailA use of a cryptographically weak pseudo-random number generator vulnerability in the...CVE-2021-260916.9 Medium
- fortinet fortisandboxA stack-based buffer overflow vulnerability (CWE-121) in the profile parser of FortiSandbox...CVE-2021-261056.4 Medium
- fortinet fortiosAn improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS...CVE-2019-161514.7 Medium
- fortinet fortimailAn improper access control vulnerability in FortiMail version 7.4.0 configured with RADIUS...CVE-2023-475399.0 Critical
- fortinet fortisoarAn improper control of generation of code ('Code Injection') vulnerability [CWE-94] in FortiSOAR...CVE-2024-217607.7 High
- fortinet fortiosAn Improper Neutralization of Input vulnerability affecting FortiGate version 6.2.0 through 6.2.1...CVE-2019-66975.2 Medium
- fortinet antivirus engine, forticlientwindows +1 moreFortiOS 6.2 running AV engine version 6.00142 and below, FortiOS 6.4 running AV engine version 6...CVE-2020-92954.7 Medium
- fortinet fortiosAn exposure of sensitive information to an unauthorized actor vulnerability in FortiOS version 6...CVE-2020-290104.9 Medium
- fortinet fortisiemA use of hard-coded cryptographic key vulnerability in FortiSIEM version 5.2.6 may allow a remote...CVE-2019-176593.6 Low
- fortinet fortiwlcA use of hard-coded password vulnerability in FortiWLC version 8.5.2 and below, version 8.4.8 and...CVE-2021-221266.5 Medium
- fortinet fortiwlcAn improper access control (CWE-284) vulnerability in FortiWLC version 8.6.0, version 8.5.3 and...CVE-2021-325844.8 Medium
- fortinet fortisandboxA Use of Hard-coded Cryptographic Key vulnerability [CWE-321] in FortiSandbox version 4.4.6 and...CVE-2024-540277.8 High
- fortinet fortiwlcAn improper neutralization of input during web page generation in FortiWLC version 8.6.0, version...CVE-2021-260874.2 Medium
- fortinet fortios, fortiproxy +1 moreAn improper neutralization of input during web page generation in the SSL VPN portal of...CVE-2019-157064.0 Medium
- fortinet fortiwebAn improper handling of syntactically invalid structure in Fortinet FortiWeb at least vesrions 7...CVE-2024-555945.5 Medium
- fortinet fortinac-fAn improper certificate validation vulnerability [CWE-295] in FortiNAC-F version 7.2.4 and below...CVE-2023-487854.4 Medium
- fortinet fortinacA improper neutralization of special elements used in a command ('command injection') in Fortinet...CVE-2023-33300EPSS 14.1%4.8 Medium
- fortinet forticlient, forticlientmac +1 moreAn external control of file name or path vulnerability [CWE-73] in FortiClientMac version 7.2.3...CVE-2023-455887.8 High
- fortinet fortianalyzer, fortimanager +1 moreAn insertion of sensitive information into log file vulnerabilities [CWE-532] in FortiManager...CVE-2024-405855.9 Medium
- fortinet fortiwebAn improper neutralization of special elements used in an SQL command ('SQL Injection')...CVE-2022-290592.6 Low
- fortinet fortindrAn improper validation of integrity check value vulnerability [CWE-354] in FortiNDR version 7.4.2...CVE-2024-475736.0 Medium
- fortinet fortimanager, fortimanager cloud +1 moreA improper neutralization of special elements used in a command ('command injection') in Fortinet...CVE-2024-466628.3 High
- fortinet fortiportalAn improper certificate validation vulnerability [CWE-295] in FortiPortal version 7.4.0, version...CVE-2024-405904.4 Medium
- fortinet fortios, fortiproxy +1 moreAn improper neutralization of input during web page Generation vulnerability [CWE-79] in FortiOS...CVE-2024-260066.9 Medium
- fortinet fortianalyzer, fortimanager, fortianalyzer big data +2 moreTwo improper neutralization of special elements used in an SQL Command ('SQL Injection')...CVE-2024-335014.0 Medium
- fortinet fortisandbox, fortisandbox cloud +1 moreAn improper neutralization of special elements used in an sql command ('sql injection') in...CVE-2024-540264.1 Medium
- fortinet fortianalyzer, fortimanager, fortianalyzer big data +2 moreMultiple improper neutralization of special elements used in an os command ('os command injection...CVE-2024-321236.5 Medium
- fortinet fortisandboxMultiple improper neutralization of special elements used in an OS Command vulnerabilities [CWE...CVE-2024-54018EPSS 10.0%6.5 Medium
- fortinet fortisandboxA client-side enforcement of server-side security vulnerability [CWE-602] in Fortinet...CVE-2024-529604.2 Medium
- fortinet fortiadcAn improper neutralization of input during web page generation ('Cross-site Scripting')...CVE-2023-379338.6 High
- fortinet fortiisolatorMultiple improper neutralization of special elements used in an OS command ('OS Command Injection...CVE-2024-555908.6 High
- fortinet fortios, fortipam, fortiproxy +2 more +4 moreA use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.0...CVE-2024-453247.0 High
- fortinet fortimailA stack-buffer overflow vulnerability [CWE-121] in Fortinet FortiMail CLI version 7.6.0 through 7...CVE-2024-466636.5 Medium
- fortinet fortindrA cross site request forgery vulnerability [CWE-352] in Fortinet FortiNDR version 7.4.0, 7.2.0...CVE-2023-487907.1 High
- fortinet fortisandboxAn improper neutralization of special elements used in an OS Command vulnerability [CWE-78] in...CVE-2024-529618.6 High
- fortinet fortisiemAn incorrect authorization vulnerability [CWE-863] in FortiSIEM 7.2 all versions, 7.1 all...CVE-2024-555923.6 Low
- fortinet fortisandboxAn incorrect authorization vulnerability [CWE-863] in FortiSandbox 4.4.0 through 4.4.6 may allow...CVE-2024-453287.1 High
- fortinet fortiwebAn improper handling of syntactically invalid structure in Fortinet FortiWeb at least verions 7.4...CVE-2023-427845.5 Medium
- fortinet fortisiemAn exposure of sensitive information to an unauthorized actor in Fortinet FortiSIEM version 6.7.0...CVE-2023-407237.7 High
- fortinet fortiwebA improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet...CVE-2024-555975.2 Medium
- fortinet fortios, fortiproxy, fortios and fortiproxy +2 moreAn Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting...CVE-2025-24472In KEVPublic exploit8.1 High
- fortinet fortisandboxAn improper neutralization of input during web page generation ('cross-site scripting') in...CVE-2024-27781EPSS 28.2%6.9 Medium
- fortinet fortisiemMultiple Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...CVE-2024-277802.2 Low
- fortinet fortianalyzer, fortianalyzer cloud, fortimanager +2 more +4 moreAn improper neutralization of special elements used in an OS command ('OS Command Injection')...CVE-2024-405846.8 Medium
- fortinet fortianalyzer, fortimanager +1 moreAn improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability ...CVE-2024-365085.9 Medium
- Show moreLoading…