Skip to content

Vulnerabilities of Fortinet FortiOS

Is your version affected?

CVE Summary Score Published
CVE-2025-25248 An Integer Overflow or Wraparound vulnerability [CWE-190] in FortiOS version 7.6.2 and below, version 7.4.7 and below,… 4.8 Medium Aug 12, 2025
CVE-2023-45584 A double free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS… 6.3 Medium Aug 12, 2025
CVE-2025-53744 An incorrect privilege assignment vulnerability [CWE-266] in FortiOS Security Fabric version 7.6.0 through 7.6.2,… 6.8 Medium Aug 12, 2025
CVE-2025-24477 A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7, FortiOS… 4.0 Medium Jul 15, 2025
CVE-2024-52965 A missing critical step in authentication vulnerability [CWE-304] in Fortinet FortiOS version 7.6.0 through 7.6.1, 7.4.0… 6.8 Medium Jul 8, 2025
CVE-2024-55599 An Improperly Implemented Security Check for Standard vulnerability [CWE-358] in FortiOS version 7.6.0, version 7.4.7… 4.9 Medium Jul 8, 2025
CVE-2024-50568 A channel accessible by non-endpoint vulnerability [CWE-300] in Fortinet FortiOS version 7.4.0 through 7.4.3, 7.2.0… 5.6 Medium Jun 10, 2025
CVE-2025-25250 An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet… 3.9 Low Jun 10, 2025
CVE-2023-29184 An incomplete cleanup vulnerability [CWE-459] in FortiOS 7.2 all versions and before & FortiProxy version 7.2.0 through… 3.1 Low Jun 10, 2025
CVE-2025-24471 An Improper Certificate Validation vulnerability [CWE-295] in FortiOS version 7.6.1 and below, version 7.4.7 and below… 6.0 Medium Jun 10, 2025
CVE-2025-22254 An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1,… 6.5 Medium Jun 10, 2025
CVE-2025-22251 An improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in FortiOS 7.6.0, 7.4.0… 3.0 Low Jun 10, 2025
CVE-2024-50562 An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL-VPN version 7.6.0, version 7.4.6 and below,… 4.4 Medium Jun 10, 2025
CVE-2025-22252 A missing authentication for critical function in Fortinet FortiProxy versions 7.6.0 through 7.6.1, FortiSwitchManager… 9.0 Critical May 28, 2025
CVE-2025-47294 A integer overflow or wraparound in Fortinet FortiOS versions 7.2.0 through 7.2.7, versions 7.0.0 through 7.0.14 may… 4.8 Medium May 28, 2025
CVE-2025-47295 A buffer over-read in Fortinet FortiOS versions 7.4.0 through 7.4.3, versions 7.2.0 through 7.2.7, and versions 7.0.0… 3.4 Low May 28, 2025
CVE-2024-50565 A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS… 3.0 Low Apr 8, 2025
CVE-2024-26013 A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS… 7.1 High Apr 8, 2025
CVE-2023-37930 Multiple issues including the use of uninitialized ressources [CWE-908] and excessive iteration [CWE-834]… 6.7 Medium Apr 8, 2025
CVE-2024-32122 A storing passwords in a recoverable format in Fortinet FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS… 2.1 Low Apr 8, 2025
CVE-2023-25610 A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0… 9.3 Critical Mar 24, 2025
CVE-2019-16151 An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS 6.4.1 and below,… 4.7 Medium Mar 21, 2025
CVE-2019-6697 An Improper Neutralization of Input vulnerability affecting FortiGate version 6.2.0 through 6.2.1, 6.0.0 through 6.0.6… 5.2 Medium Mar 17, 2025
CVE-2020-29010 An exposure of sensitive information to an unauthorized actor vulnerability in FortiOS version 6.2.4 and below,… 4.9 Medium Mar 17, 2025
CVE-2019-15706 An improper neutralization of input during web page generation in the SSL VPN portal of FortiProxy version 2.0.0,… 4.0 Medium Mar 17, 2025

Other Fortinet products