Skip to contentFortinet vulnerabilities
Products
Show 102 moreShow less
Newest
- fortinet fortimanager, fortimanager cloud +1 moreAn Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability ...CVE-2024-529645.2 Medium
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreAn Integer Overflow or Wraparound vulnerability [CWE-190] in FortiOS version 7.6.2 and below,...CVE-2025-252484.8 Medium
- fortinet fortios, fortipam, fortiproxy +2 moreA double free vulnerability [CWE-415] in Fortinet FortiOS version 7.4.0, version 7.2.0 through 7...CVE-2023-455846.3 Medium
- fortinet fortiwebA improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below, versions 7.4.7...CVE-2025-52970Public exploit7.7 High
- fortinet fortios, siemens ruggedcom ape1808 +1 moreAn incorrect privilege assignment vulnerability [CWE-266] in FortiOS Security Fabric version 7.6...CVE-2025-537446.8 Medium
- fortinet fortiadcAn improper neutralization of special elements used in an OS Command ("OS Command Injection")...CVE-2025-498136.6 Medium
- fortinet fortiwebA stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiWeb CLI version 7.6.0...CVE-2025-327666.3 Medium
- fortinet fortisiemAn improper neutralization of special elements used in an OS command ('OS Command Injection')...CVE-2025-25256Public exploitEPSS 67.3%9.8 Critical
- fortinet forticamera, fortimail, fortindr +3 more +5 moreMultiple relative path traversal vulnerabilities [CWE-23] in Fortinet FortiMail version 7.6.0...CVE-2024-405884.2 Medium
- fortinet fortiisolatorAn improper access control vulnerability [CWE-284] in FortiIsolator version 2.4.4, version 2.4.3,...CVE-2024-321244.0 Medium
- fortinet fortiisolator, fortisandbox +1 moreAn insufficient session expiration vulnerability [CWE-613] in FortiSandbox FortiSandbox version 4...CVE-2024-277796.3 Medium
- fortinet fortiwebAn improper neutralization of special elements used in an SQL command ('SQL Injection')...CVE-2025-25257In KEVPublic exploitEPSS 99.9%9.6 Critical
- fortinet fortiosA heap-based buffer overflow in Fortinet FortiOS versions 7.6.0 through 7.6.2, 7.4.0 through 7.4...CVE-2025-244774.0 Medium
- fortinet fortios, fortiproxy +1 moreA missing critical step in authentication vulnerability [CWE-304] in Fortinet FortiOS version 7.6...CVE-2024-529656.8 Medium
- fortinet fortianalyzer, fortianalyzer cloud, fortimanager +1 more +3 moreAn Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...CVE-2025-244742.6 Low
- fortinet fortios, fortiproxy, fortisase +1 more +3 moreAn Improperly Implemented Security Check for Standard vulnerability [CWE-358] in FortiOS version...CVE-2024-555994.9 Medium
- fortinet fortios, fortiproxy +1 moreA channel accessible by non-endpoint vulnerability [CWE-300] in Fortinet FortiOS version 7.4.0...CVE-2024-505685.6 Medium
- fortinet fortios, fortisase, siemens ruggedcom ape1808 +2 moreAn Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] in FortiOS...CVE-2025-252503.9 Low
- fortinet forticlientemsA server-side request forgery vulnerability [CWE-918] in Fortinet FortiClientEMS version 7.4.0...CVE-2023-487864.1 Medium
- fortinet fortios, fortiproxy +1 moreAn incomplete cleanup vulnerability [CWE-459] in FortiOS 7.2 all versions and before &...CVE-2023-291843.1 Low
- fortinet fortios, fortisase, siemens ruggedcom ape1808 +2 moreAn Improper Certificate Validation vulnerability [CWE-295] in FortiOS version 7.6.1 and below,...CVE-2025-244716.0 Medium
- fortinet fortios, fortiproxy, fortiweb +2 moreAn Improper Privilege Management vulnerability [CWE-269] affecting Fortinet FortiOS version 7.6.0...CVE-2025-222546.5 Medium
- fortinet fortipam, fortisra +1 moreA improper handling of insufficient permissions or privileges in Fortinet FortiPAM 1.4.0 through...CVE-2025-222566.0 Medium
- fortinet forticlientemsAn improper authentication vulnerability [CWE-287] in Fortinet FortiClientEMS version 7.4.0 and...CVE-2024-321194.6 Medium
- fortinet fortiadcAn Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')...CVE-2025-311047.0 High
- fortinet fortiosAn improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in...CVE-2025-222513.0 Low
- fortinet fortios, fortipam, fortiproxy +2 more +4 moreAn Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL-VPN version 7.6.0,...CVE-2024-50562Public exploit4.4 Medium
- fortinet forticlient, forticlientwindows +1 moreA improper validation of certificate with host mismatch in Fortinet FortiClientWindows version 7...CVE-2024-540194.4 Medium
- fortinet fortiportalA authorization bypass through user-controlled key in Fortinet FortiPortal versions 7.4.0,...CVE-2024-453293.9 Low
- fortinet fortiportalA insertion of sensitive information into log file in Fortinet FortiPortal versions 7.4.0,...CVE-2025-467772.2 Low
- fortinet forticlient, forticlientwindows +1 moreA exposure of sensitive system information to an unauthorized control sphere in Fortinet...CVE-2025-244734.8 Medium
- fortinet fortios, fortiproxy, fortiswitchmanager +2 moreA missing authentication for critical function in Fortinet FortiProxy versions 7.6.0 through 7.6...CVE-2025-222529.0 Critical
- fortinet fortiosA integer overflow or wraparound in Fortinet FortiOS versions 7.2.0 through 7.2.7, versions 7.0.0...CVE-2025-472944.8 Medium
- fortinet fortimanagerA missing authorization in Fortinet FortiManager versions 7.2.0 through 7.2.1, and versions 7.0.0...CVE-2024-540202.1 Low
- fortinet fortiosA buffer over-read in Fortinet FortiOS versions 7.4.0 through 7.4.3, versions 7.2.0 through 7.2.7...CVE-2025-472953.4 Low
- fortinet forticlient, forticlientmac +1 moreAn Incorrect Authorization vulnerability [CWE-863] in FortiClient Mac 7.4.0 through 7.4.2, 7.2.0...CVE-2025-252517.4 High
- fortinet forticamera, fortimail, fortindr +4 more +6 moreA stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiVoice versions 7.2.0, 7.0...CVE-2025-32756In KEVPublic exploitEPSS 30.9%9.6 Critical
- fortinet forticlientems, forticlientems cloud +1 moreA Relative Path Traversal vulnerability [CWE-23] in FortiClientEMS 7.4.0 through 7.4.1 and...CVE-2025-228595.0 Medium
- fortinet forticlient, forticlientmac, fortivoiceucdesktop +1 more +3 moreAn improper isolation or compartmentalization vulnerability [CWE-653] in FortiClientMac version 7...CVE-2024-352812.3 Low
- fortinet fortiswitchA unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote...CVE-2024-48887Public exploitEPSS 15.7%9.3 Critical
- fortinet fortianalyzer, fortimanager, fortios +3 more +5 moreA improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in...CVE-2024-505653.0 Low
- fortinet fortianalyzer, fortimanager, fortios +3 more +5 moreA improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in...CVE-2024-260137.1 High
- fortinet fortios, fortiproxy +1 moreMultiple issues including the use of uninitialized ressources [CWE-908] and excessive iteration ...CVE-2023-379306.7 Medium
- fortinet fortianalyzer, fortimanager +1 moreAn Improper Output Neutralization for Logs vulnerability [CWE-117] in FortiAnalyzer version 7.6.1...CVE-2024-529625.0 Medium
- fortinet fortiwebAn Incorrect User Management vulnerability [CWE-286] in FortiWeb version 7.6.2 and below, version...CVE-2024-46671Public exploit5.6 Medium
- fortinet fortios, siemens ruggedcom ape1808 +1 moreA storing passwords in a recoverable format in Fortinet FortiOS versions 7.2.0 through 7.2.1...CVE-2024-321222.1 Low
- fortinet fortiisolatorAn improper neutralization of special elements used in an OS command ('OS Command Injection')...CVE-2024-540256.5 Medium
- fortinet fortiisolatorAn improper neutralization of special elements used in an OS command ('OS Command Injection')...CVE-2024-540247.0 High
- fortinet fortiwebAn Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability ...CVE-2025-25254EPSS 17.1%6.8 Medium
- fortinet forticlientemsAn improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79]...CVE-2025-228552.6 Low
- Show moreLoading…