Advisories · Technology
Fortinet FortiDDoS.
Every CVE that names Fortinet FortiDDoS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.0 Medium
Information disclosure in Fortinet FortiDDoS and others
- Fortinet FortiDDoS
- Fortinet FortiNDR
- Information disclosure
- CVSS 4.1 Medium
A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests, where the `Host` header points to an arbitr…
- Fortinet FortiTester
- Fortinet FortiOS
- CWE-610
- CVSS 5.9 Medium
OS command injection in Fortinet FortiDDoS and others
- Fortinet FortiDDoS
- Fortinet FortiDDoS-F
- Command injection
- CVSS 7.1 High
OS command injection in Fortinet FortiDDoS and others
- Fortinet FortiDDoS
- Fortinet FortiDDoS-F
- Command injection
- CVSS 8.1 High
A use of hard-coded cryptographic key vulnerability [CWE-321] in FortiDDoS API 5.5.0 through 5.5.1, 5.4.0 through 5.4.2, 5.3.0 through 5.3.1, 5.2.0, 5.1.0 may allow an attacker who managed to retriev…
- Fortinet FortiDDoS
- CVSS 6.3 Medium
Stack-based buffer overflow in Fortinet FortiFone and others
- Fortinet FortiFone
- Fortinet FortiADC
- Memory corruption
- CVSS 6.3 Medium
Buffer overflow in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiDDoS-F
- Memory corruption