Skip to contentFortinet vulnerabilities
Products
Show 102 moreShow less
Newest
- fortinet fortipamA Cleartext Storage of Sensitive Information in Memory vulnerability [CWE-316] in Fortinet...CVE-2025-617133.8 Low
- fortinet forticlient, forticlientwindows +1 moreAn active debug code vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3,...CVE-2025-546604.9 Medium
- fortinet fortiadcAn exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiADC...CVE-2025-549713.9 Low
- fortinet fortiextender, fortiextender firmware +1 moreA buffer copy without checking size of input ('classic buffer overflow') in Fortinet...CVE-2025-467766.3 Medium
- fortinet fortiextender, fortiextender firmware +1 moreA debug messages revealing unnecessary information vulnerability in Fortinet FortiExtender 7.6.0...CVE-2025-467755.2 Medium
- fortinet fortimailAn improper neutralization of crlf sequences ('crlf injection') in Fortinet FortiMail 7.6.0...CVE-2025-549723.9 Low
- fortinet forticlient, forticlientwindows +1 moreA Heap-based Buffer Overflow vulnerability [CWE-122] in Fortinet FortiClientWindows 7.4.0 through...CVE-2025-463737.1 High
- fortinet fortivoiceAn improper neutralization of special elements used in an SQL Command ("SQL Injection")...CVE-2025-586927.7 High
- fortinet fortiwebAn Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')...CVE-2025-58034In KEVPublic exploitEPSS 54.7%6.7 Medium
- fortinet forticlient, forticlientwindows +1 moreAn Exposed IOCTL with Insufficient Access Control vulnerability [CWE-782] in Fortinet...CVE-2025-477617.1 High
- fortinet fortiwebA relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0...CVE-2025-64446In KEVPublic exploitEPSS 91.1%9.4 Critical
- fortinet fortidlp, fortidlp agent +1 moreA insertion of sensitive information into log file in Fortinet FortiDLP 12.0.0 through 12.0.5, 11...CVE-2025-467524.2 Medium
- fortinet fortidlp, fortidlp agent +1 moreAn Exposure of Private Personal Information ('Privacy Violation') vulnerability [CWE-359] in...CVE-2025-539505.1 Medium
- fortinet fortidlp, fortidlp agent +1 moreAn Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability ...CVE-2025-539514.9 Medium
- fortinet fortidlp, fortidlp agent +1 moreAn Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability ...CVE-2025-546587.2 High
- fortinet fortios, fortiproxy, siemens ruggedcom ape1808 +2 moreAn Insertion of Sensitive Information into Log File vulnerability [CWE-532] in FortiOS 7.6.0...CVE-2025-315142.6 Low
- fortinet fortios, fortiproxy +1 moreAn improper authorization vulnerability [CWE-285] in Fortinet FortiOS version 7.4.0 through 7.4.1...CVE-2025-548224.2 Medium
- fortinet forticlient, forticlientmac +1 moreAn Improper Verification of Cryptographic Signature vulnerability [CWE-347] in FortiClient MacOS...CVE-2025-467746.8 Medium
- fortinet forticlient, forticlientmac +1 moreAn Improper Control of Generation of Code ('Code Injection') vulnerability [CWE-94] in...CVE-2025-313655.5 Medium
- fortinet fortiadcAn exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet...CVE-2025-599216.2 Medium
- fortinet fortianalyzerAn improper authentication vulnerability [CWE-287] in Fortinet FortiAnalyzer version 7.6.0...CVE-2025-538456.2 Medium
- fortinet fortiisolatorAn insufficient session expiration vulnerability [CWE-613] and an incorrect authorization...CVE-2024-335077.0 High
- fortinet forticlient, forticlientwindows +1 moreAn Uncontrolled Search Path Element vulnerability [CWE-427] in FortiClient Windows 7.4.0 through...CVE-2025-577166.0 Medium
- fortinet fortios, fortiproxy +1 moreAn Improperly Implemented Security Check for Standard vulnerability [CWE-358] in FortiProxy 7.6.0...CVE-2025-252554.8 Medium
- fortinet fortiosAn Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL VPN 7.6.0 through 7.6.2...CVE-2025-252524.3 Medium
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreAn improper check or handling of exceptional conditions vulnerability [CWE-703] in FortiOS...CVE-2024-260085.0 Medium
- fortinet fortianalyzerA concurrent execution using shared resource with improper synchronization ('Race Condition')...CVE-2025-549735.3 Medium
- fortinet fortimail, fortimanager, fortimanager cloud +9 more +11 moreA insertion of sensitive information into sent data in Fortinet FortiManager Cloud 7.4.1 through...CVE-2024-475694.2 Medium
- fortinet fortios, fortiproxy +1 moreA stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7...CVE-2023-467186.3 Medium
- fortinet fortianalyzer, fortianalyzer cloud, fortimanager +3 more +5 moreA heap-based buffer overflow in Fortinet FortiOS 7.6.0 through 7.6.1, 7.4.0 through 7.4.5, 7.2.0...CVE-2024-505716.5 Medium
- fortinet fortios, fortiproxy, fortisase +1 more +3 moreAn Improper Neutralization of Input During Web Page Generation vulnerability [CWE-79] in FortiOS...CVE-2025-313664.5 Medium
- fortinet fortios, fortiproxy, fortipam +1 more +3 moreAn Improper Validation of Certificate with Host Mismatch vulnerability [CWE-297] in FortiProxy...CVE-2025-252536.8 Medium
- fortinet fortios, fortipam, fortiproxy +2 more +4 moreA heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4...CVE-2025-222585.7 Medium
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreAn Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version...CVE-2025-577406.7 Medium
- fortinet fortios, fortiproxy, fortisase +1 more +3 moreAn URL Redirection to Untrusted Site vulnerabilities [CWE-601] in FortiOS 7.6.0 through 7.6.2, 7...CVE-2025-478902.5 Low
- fortinet forticlient, forticlientmac +1 moreAn Incorrect Permission Assignment for Critical Resource vulnerability [CWE-732] in...CVE-2025-577417.0 High
- fortinet fortipam, fortiswitchmanager +1 moreA weak authentication in Fortinet FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0 through 1.3.1, 1.2.0...CVE-2025-492017.4 High
- fortinet fortiosAn Incorrect Provision of Specified Functionality vulnerability [CWE-684] in FortiOS 7.6.0, 7.4.0...CVE-2025-583257.8 High
- fortinet fortisiemAn improper neutralization of input during web page generation vulnerability [CWE-79] in...CVE-2025-583246.1 Medium
- fortinet fortios, siemens ruggedcom ape1808 +1 moreAn Unchecked Return Value vulnerability [CWE-252] in Fortinet FortiOS version 7.6.0 through 7.6.3...CVE-2025-589032.5 Low
- fortinet fortisoar, fortisoar on-premise +1 moreAn Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')...CVE-2024-488916.6 Medium
- fortinet fortivoiceTwo improper neutralization of special elements used in an OS command ('OS Command Injection')...CVE-2025-478567.2 High
- fortinet fortios, fortiproxy, siemens ruggedcom ape1808 +2 moreAn Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] in FortiOS 7...CVE-2025-228626.3 Medium
- fortinet fortiwebA Relative Path Traversal vulnerability [CWE-23] in FortiWeb 7.6.0 through 7.6.4, 7.4.0 through 7...CVE-2025-53609EPSS 11.5%4.7 Medium
- fortinet fortiddos-fAn improper neutralization of special elements used in an OS command ('OS Command Injection')...CVE-2024-453256.5 Medium
- fortinet fortisoarA relative path traversal vulnerability [CWE-23] in FortiSOAR 7.6.0, 7.5.0 through 7.5.1, 7.4 all...CVE-2024-488926.4 Medium
- fortinet fortiwebA improper neutralization of special elements used in an os command ('os command injection')...CVE-2025-478576.5 Medium
- fortinet fortisoarAn Improper neutralization of input during web page generation ('cross-site scripting')...CVE-2025-329326.2 Medium
- fortinet fortiwebAn improper neutralization of special elements used in an OS command ('OS Command Injection')...CVE-2025-277596.7 Medium
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreAn authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet...CVE-2024-260097.9 High
- Show moreLoading…