Advisories · Technology
Fortinet FortiOS.
Every CVE that names Fortinet FortiOS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.7 Medium
Fortinet FortiOS: A improper locking vulnerability in Fortinet FortiOS 8.0.0…
- Fortinet FortiOS
- CWE-667
- CVSS 2.1 Low
Double free in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiSwitch
- Memory corruption
- CVSS 2.5 Low
NULL pointer dereference in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiProxy
- Memory corruption
- CVSS 7.3 High
Improper certificate validation in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiProxy
- Weak cryptography or TLS
- CVSS 4.8 Medium
Fortinet FortiWeb: A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through…
- Fortinet FortiWeb
- Fortinet FortiOS
- CWE-184
- CVSS 5.1 Medium
Stack-based buffer overflow in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiPAM
- Memory corruption
- CVSS 5.0 Medium
Resource allocation without limits in Fortinet FortiOS
- Fortinet FortiOS
- Denial of service
- CVSS 4.1 Medium
Fortinet FortiOS: A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3…
- Fortinet FortiOS
- Fortinet FortiPAM
- CWE-126
- CVSS 4.1 Medium
Fortinet FortiOS: A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3…
- Fortinet FortiOS
- CWE-126
- CVSS 6.1 Medium
Cross-site scripting in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiProxy
- Cross-site scripting (XSS)
- CVSS 5.0 Medium
Path traversal in Fortinet FortiProxy and others
- Fortinet FortiProxy
- Fortinet FortiOS
- Path traversal
- CVSS 3.1 Low
HTTP response splitting in Fortinet FortiPAM and others
- Fortinet FortiPAM
- Fortinet FortiProxy
- Other injection
- CVSS 3.4 Low
HTTP response splitting in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiPAM
- Other injection
- CVSS 5.9 Medium
Stack-based buffer overflow in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiProxy
- Memory corruption
- CVSS 6.0 Medium
Fortinet FortiOS: An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244]…
- Fortinet FortiOS
- Fortinet FortiProxy
- CWE-1244
- CVSS 8.3 High
Out-of-bounds write in Fortinet FortiOS
- Fortinet FortiOS
- Memory corruption
- CVSS 5.4 MediumCritical · KEVKEV
Path traversal in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiProxy
- Path traversal
- CVSS 6.2 Medium
Missing authentication in Fortinet FortiOS
- Fortinet FortiOS
- Authentication bypass
- CVSS 3.8 Low
Fortinet FortiOS: An Improper Verification of Source of a Communication Channel vulnerability [CWE-940]…
- Fortinet FortiOS
- CWE-940
- CVSS 5.3 MediumCritical · KEVKEV
Information disclosure in Fortinet FortiOS
- Fortinet FortiOS
- Information disclosure
- CVSS 6.7 Medium
Uncontrolled format string in Fortinet FortiOS
- Fortinet FortiOS
- Memory corruption
- CVSS 5.2 Medium
HTTP request smuggling in Fortinet FortiOS
- Fortinet FortiOS
- HTTP request smuggling
- CVSS 7.5 High
Fortinet FortiOS: An Authentication Bypass by Primary Weakness vulnerability [CWE-305] vulnerability in…
- Fortinet FortiOS
- CWE-305
- CVSS 3.2 Low
Fortinet FortiOS: Fortinet FortiOS through 7.6.6 allows attackers to decrypt LDAP credentials stored in…
- Fortinet FortiOS
- CWE-1394
- CVSS 9.4 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
Authentication bypass in Fortinet FortiWeb and others
- Fortinet FortiWeb
- Fortinet FortiNAC-F
- Authentication bypass
- CVSS 7.4 HighCritical · KEVKEV
Heap-based buffer overflow in Fortinet FortiSwitchManager and others
- Fortinet FortiSwitchManager
- Fortinet FortiOS
- Memory corruption
- CVSS 5.9 Medium
Fortinet FortiAnalyzer: A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2…
- Fortinet FortiAnalyzer
- Fortinet FortiPortal
- CWE-320
- CVSS 6.3 Medium
Sensitive information in log files in Fortinet FortiSASE and others
- Fortinet FortiSASE
- Fortinet FortiProxy
- Information disclosure
- CVSS 9.1 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
Improper signature verification in Fortinet FortiSwitchManager and others
- Fortinet FortiSwitchManager
- Fortinet FortiOS
- Weak cryptography or TLS
- CVSS 5.3 Medium
Insufficient session expiration in Fortinet FortiOS
- Fortinet FortiOS
- Authentication bypass
- CVSS 6.9 Medium
Stack-based buffer overflow in Fortinet FortiOS
- Fortinet FortiOS
- Memory corruption
- CVSS 1.7 Low
Improper privilege management in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiProxy
- Privilege escalation
- CVSS 6.9 Medium
Stack-based buffer overflow in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiSASE
- Memory corruption
- CVSS 2.6 Low
Sensitive information in log files in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiProxy
- Information disclosure
- CVSS 4.2 Medium
Improper authorization in Fortinet FortiProxy and others
- Fortinet FortiProxy
- Fortinet FortiOS
- Broken access control
- CVSS 4.8 Medium
Fortinet FortiOS: An Improperly Implemented Security Check for Standard vulnerability [CWE-358]…
- Fortinet FortiOS
- Fortinet FortiProxy
- CWE-358
- CVSS 4.3 Medium
Insufficient session expiration in Fortinet FortiOS
- Fortinet FortiOS
- Authentication bypass
- CVSS 5.0 Medium
Improper check for unusual conditions in Fortinet FortiProxy and others
- Fortinet FortiProxy
- Fortinet FortiPAM
- CWE-754
- CVSS 4.2 Medium
Information disclosure in Fortinet FortiManager and others
- Fortinet FortiManager
- Fortinet FortiOS
- Information disclosure
- CVSS 6.3 Medium
Stack-based buffer overflow in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiProxy
- Memory corruption
- CVSS 6.5 Medium
Heap-based buffer overflow in Fortinet FortiManager and others
- Fortinet FortiManager
- Fortinet FortiOS
- Memory corruption
- CVSS 4.5 Medium
Cross-site scripting in Fortinet FortiSASE and others
- Fortinet FortiSASE
- Fortinet FortiOS
- Cross-site scripting (XSS)
- CVSS 5.7 Medium
Heap-based buffer overflow in Fortinet FortiPAM and others
- Fortinet FortiPAM
- Fortinet FortiOS
- Memory corruption
- CVSS 6.8 Medium
Improper certificate validation in Fortinet FortiProxy and others
- Fortinet FortiProxy
- Fortinet FortiOS
- Weak cryptography or TLS
- CVSS 6.7 Medium
Heap-based buffer overflow in Fortinet FortiPAM and others
- Fortinet FortiPAM
- Fortinet FortiProxy
- Memory corruption
- CVSS 2.5 Low
Open redirect in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiProxy
- Open redirect
- CVSS 7.8 High
Fortinet FortiOS: An Incorrect Provision of Specified Functionality vulnerability [CWE-684] in FortiOS…
- Fortinet FortiOS
- CWE-684
- CVSS 2.5 Low
Unchecked return value in Fortinet FortiOS
- Fortinet FortiOS
- CWE-252
- CVSS 6.3 Medium
Authentication bypass in Fortinet FortiProxy and others
- Fortinet FortiProxy
- Fortinet FortiOS
- Authentication bypass
- CVSS 7.9 High
Authentication bypass in Fortinet FortiProxy and others
- Fortinet FortiProxy
- Fortinet FortiOS
- Authentication bypass
- CVSS 4.8 Medium
Integer overflow in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiPAM
- Memory corruption
- CVSS 6.3 Medium
Double free in Fortinet FortiProxy and others
- Fortinet FortiProxy
- Fortinet FortiOS
- Memory corruption
- CVSS 6.8 Medium
Fortinet FortiOS: An incorrect privilege assignment vulnerability [CWE-266] in FortiOS Security Fabric…
- Fortinet FortiOS
- Privilege escalation
- CVSS 4.0 Medium
Heap-based buffer overflow in Fortinet FortiOS
- Fortinet FortiOS
- Memory corruption
- CVSS 6.8 Medium
Fortinet FortiOS: A missing critical step in authentication vulnerability [CWE-304] in Fortinet FortiOS…
- Fortinet FortiOS
- Fortinet FortiProxy
- Authentication bypass
- CVSS 4.9 Medium
Fortinet FortiOS: An Improperly Implemented Security Check for Standard vulnerability [CWE-358] in FortiOS…
- Fortinet FortiOS
- Fortinet FortiProxy
- CWE-358
- CVSS 5.6 Medium
Fortinet FortiOS: A channel accessible by non-endpoint vulnerability [CWE-300] in Fortinet FortiOS version…
- Fortinet FortiOS
- Fortinet FortiProxy
- CWE-300
- CVSS 3.9 Low
Information disclosure in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiSASE
- Information disclosure
- CVSS 3.1 Low
Incomplete cleanup in Fortinet FortiProxy and others
- Fortinet FortiProxy
- Fortinet FortiOS
- CWE-459
- CVSS 6.0 Medium
Improper certificate validation in Fortinet FortiOS
- Fortinet FortiOS
- Weak cryptography or TLS