Skip to content

Known vulnerabilities in Fortinet FortiOS

Is your version affected?

CVE Summary Score Published
CVE-2020-12818 An insufficient logging vulnerability in FortiGate before 6.4.1 may allow the traffic from an unauthenticated attacker… Not rated Sep 24, 2020
CVE-2019-5591 Exploited Fortinet FortiOS Default Configuration Vulnerability 6.5 Medium Aug 14, 2020
CVE-2019-6696 An improper input validation vulnerability in FortiOS 6.2.1, 6.2.0, 6.0.8 and below until 5.4.0 under admin webUI may… Not rated Mar 15, 2020
CVE-2019-15703 An Insufficient Entropy in PRNG vulnerability in Fortinet FortiOS 6.2.1, 6.2.0, 6.0.8 and below for device not enable… Not rated Oct 24, 2019
CVE-2019-5588 A reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4 under SSL VPN web portal may… Not rated Jun 4, 2019
CVE-2019-5586 A reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiOS 5.2.0 to 5.6.10, 6.0.0 to 6.0.4 under SSL VPN… Not rated Jun 4, 2019
CVE-2019-5587 Lack of root file system integrity checking in Fortinet FortiOS VM application images all versions below 6.0.5 may allow… Not rated Jun 4, 2019
CVE-2018-13384 A Host Header Redirection vulnerability in Fortinet FortiOS all versions below 6.0.5 under SSL VPN web portal allows a… Not rated Jun 4, 2019
CVE-2018-13365 An Information Exposure vulnerability in Fortinet FortiOS 6.0.1, 5.6.5 and below, allow attackers to learn private IP as… Not rated May 29, 2019
CVE-2018-13366 An information disclosure vulnerability in Fortinet FortiOS 6.0.1, 5.6.7 and below allows attacker to reveals serial… Not rated Apr 9, 2019
CVE-2018-9185 An information disclosure vulnerability in Fortinet FortiOS 6.0.0 and below versions reveals user's web portal login… Not rated Jul 5, 2018
CVE-2017-7733 A Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiOS 5.4.0 to 5.4.5 and 5.6.0 allows a remote… Not rated Oct 27, 2017
CVE-2017-14182 A Denial of Service (DoS) vulnerability in Fortinet FortiOS 5.4.0 to 5.4.5 allows an authenticated user to cause the web… Not rated Oct 27, 2017
CVE-2017-3128 A stored XSS (Cross-Site-Scripting) vulnerability in Fortinet FortiOS allows attackers to execute unauthorized code or… Not rated May 23, 2017

Other Fortinet products