| CVE-2022-38380 |
An improper access control [CWE-284] vulnerability in FortiOS version 7.2.0 and versions 7.0.0 through 7.0.7 may allow a…
|
4.3
Medium
|
Nov 2, 2022 |
| CVE-2022-35842 |
An exposure of sensitive information to an unauthorized actor vulnerabiltiy [CWE-200] in FortiOS SSL-VPN versions 7.2.0,…
|
3.7
Low
|
Nov 2, 2022 |
| CVE-2022-30307 |
A key management error vulnerability [CWE-320] affecting the RSA SSH host key in FortiOS 7.2.0 and below, 7.0.6 and…
|
3.9
Low
|
Nov 2, 2022 |
| CVE-2021-44171 |
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiOS version…
|
9.0
Critical
|
Oct 10, 2022 |
| CVE-2021-43080 |
An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS version 7.2.0,…
|
4.6
Medium
|
Sep 6, 2022 |
| CVE-2022-29053 |
A missing cryptographic steps vulnerability [CWE-325] in the functions that encrypt the keytab files in FortiOS…
|
2.3
Low
|
Sep 6, 2022 |
| CVE-2022-27491 |
A improper verification of source of a communication channel in Fortinet FortiOS with IPS engine version 7.201 through…
|
6.8
Medium
|
Sep 6, 2022 |
| CVE-2022-23442 |
An improper access control vulnerability [CWE-284] in FortiOS versions 6.2.0 through 6.2.11, 6.4.0 through 6.4.8 and…
|
4.3
Medium
|
Aug 3, 2022 |
| CVE-2022-23438 |
An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in…
|
4.7
Medium
|
Jul 18, 2022 |
| CVE-2022-22306 |
An improper certificate validation vulnerability [CWE-295] in FortiOS 6.0.0 through 6.0.14, 6.2.0 through 6.2.10,…
|
5.4
Medium
|
May 24, 2022 |
| CVE-2021-41032 |
An improper access control vulnerability [CWE-284] in FortiOS versions 6.4.8 and prior and 7.0.3 and prior may allow…
|
6.3
Medium
|
May 4, 2022 |
| CVE-2020-15936 |
A improper input validation in Fortinet FortiGate version 6.4.3 and below, version 6.2.5 and below, version 6.0.11 and…
|
2.6
Low
|
Mar 1, 2022 |
| CVE-2021-44168 |
Exploited
Fortinet FortiOS Arbitrary File Download
|
3.3
Low
|
Jan 4, 2022 |
| CVE-2021-36169 |
A Hidden Functionality in Fortinet FortiOS 7.x before 7.0.1, FortiOS 6.4.x before 6.4.7 allows attacker to Execute…
|
4.2
Medium
|
Dec 13, 2021 |
| CVE-2021-36173 |
A heap-based buffer overflow in the firmware signature verification function of FortiOS versions 7.0.1, 7.0.0, 6.4.0…
|
8.0
High
|
Dec 8, 2021 |
| CVE-2021-26109 |
An integer overflow or wraparound vulnerability in the memory allocator of SSLVPN in FortiOS before 7.0.1 may allow an…
|
8.1
High
|
Dec 8, 2021 |
| CVE-2021-26108 |
A use of hard-coded cryptographic key vulnerability in the SSLVPN of FortiOS before 7.0.1 may allow an attacker to…
|
7.5
High
|
Dec 8, 2021 |
| CVE-2021-41024 |
A relative path traversal [CWE-23] vulnerabiltiy in FortiOS versions 7.0.0 and 7.0.1 and FortiProxy verison 7.0.0 may…
|
7.5
High
|
Dec 8, 2021 |
| CVE-2021-26103 |
An insufficient verification of data authenticity vulnerability (CWE-345) in the user interface of FortiProxy verison…
|
6.3
Medium
|
Dec 8, 2021 |
| CVE-2021-32600 |
An exposure of sensitive information to an unauthorized actor vulnerability in FortiOS CLI 7.0.0, 6.4.0 through 6.4.6,…
|
5.0
Medium
|
Nov 17, 2021 |
| CVE-2021-41019 |
An improper validation of certificate with host mismatch [CWE-297] vulnerability in FortiOS versions 6.4.6 and below may…
|
3.5
Low
|
Nov 2, 2021 |
| CVE-2021-24018 |
A buffer underwrite vulnerability in the firmware verification routine of FortiOS before 7.0.1 may allow an attacker…
|
4.3
Medium
|
Aug 4, 2021 |
| CVE-2021-24012 |
An improper following of a certificate's chain of trust vulnerability in FortiGate versions 6.4.0 to 6.4.4 may allow…
|
6.5
Medium
|
Jun 2, 2021 |
| CVE-2020-15938 |
When traffic other than HTTP/S (eg: SSH traffic, etc...) traverses the FortiGate in version below 6.2.5 and below…
|
4.0
Medium
|
Mar 4, 2021 |
| CVE-2020-15937 |
An improper neutralization of input vulnerability in FortiGate version 6.2.x below 6.2.5 and 6.4.x below 6.4.1 may allow…
|
4.7
Medium
|
Mar 3, 2021 |