| CVE-2024-26006 |
An improper neutralization of input during web page Generation vulnerability [CWE-79] in FortiOS version 7.4.3 and…
|
6.9
Medium
|
Mar 14, 2025 |
| CVE-2024-45324 |
A use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.0 through 7.4.4, version…
|
7.0
High
|
Mar 11, 2025 |
| CVE-2025-24472 |
Exploited
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
|
8.1
High
|
Feb 11, 2025 |
| CVE-2023-40721 |
A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet allows a privileged…
|
6.3
Medium
|
Feb 11, 2025 |
| CVE-2024-40591 |
An incorrect privilege assignment vulnerability [CWE-266] in Fortinet FortiOS version 7.6.0, 7.4.0 through 7.4.4,…
|
8.0
High
|
Feb 11, 2025 |
| CVE-2024-35279 |
A stack-based buffer overflow [CWE-121] vulnerability in Fortinet FortiOS version 7.2.4 through 7.2.8 and version…
|
7.7
High
|
Feb 11, 2025 |
| CVE-2022-23439 |
A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison…
|
4.1
Medium
|
Jan 22, 2025 |
| CVE-2024-36504 |
An out-of-bounds read vulnerability [CWE-125] in FortiOS SSLVPN web portal versions 7.4.0 through 7.4.4, versions…
|
6.2
Medium
|
Jan 14, 2025 |
| CVE-2024-46666 |
An allocation of resources without limits or throttling [CWE-770] vulnerability in FortiOS versions 7.6.0, versions…
|
4.8
Medium
|
Jan 14, 2025 |
| CVE-2024-54021 |
An Improper Neutralization of CRLF Sequences in HTTP Headers ('http response splitting') vulnerability [CWE-113] in…
|
6.4
Medium
|
Jan 14, 2025 |
| CVE-2024-48886 |
A weak authentication in Fortinet FortiOS versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.0.15, 6.4.0…
|
8.0
High
|
Jan 14, 2025 |
| CVE-2024-48884 |
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet…
|
6.7
Medium
|
Jan 14, 2025 |
| CVE-2024-46668 |
An allocation of resources without limits or throttling vulnerability [CWE-770] in FortiOS versions 7.4.0 through 7.4.4,…
|
7.1
High
|
Jan 14, 2025 |
| CVE-2023-46715 |
An origin validation error [CWE-346] vulnerability in Fortinet FortiOS IPSec VPN version 7.4.0 through 7.4.1 and…
|
4.7
Medium
|
Jan 14, 2025 |
| CVE-2023-42786 |
A null pointer dereference in FortiOS versions 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0 all versions, 6.4 all…
|
6.4
Medium
|
Jan 14, 2025 |
| CVE-2023-42785 |
A null pointer dereference in FortiOS versions 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0 all versions, 6.4 all…
|
6.4
Medium
|
Jan 14, 2025 |
| CVE-2024-46670 |
An Out-of-bounds Read vulnerability [CWE-125] in FortiOS version 7.6.0, version 7.4.4 and below, version 7.2.9 and below…
|
7.5
High
|
Jan 14, 2025 |
| CVE-2024-46669 |
An Integer Overflow or Wraparound vulnerability [CWE-190] in version 7.4.4 and below, version 7.2.10 and below;…
|
3.2
Low
|
Jan 14, 2025 |
| CVE-2024-55591 |
Exploited
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
|
9.6
Critical
|
Jan 14, 2025 |
| CVE-2024-52963 |
A out-of-bounds write in Fortinet FortiOS versions 7.6.0, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through…
|
3.5
Low
|
Jan 14, 2025 |
| CVE-2024-46665 |
An insertion of sensitive information into sent data vulnerability [CWE-201] in FortiOS 7.6.0, 7.4.0 through 7.4.4 may…
|
3.5
Low
|
Jan 14, 2025 |
| CVE-2020-12820 |
Under non-default configuration, a stack-based buffer overflow in FortiOS version 6.0.10 and below, version 5.6.12 and…
|
5.4
Medium
|
Dec 19, 2024 |
| CVE-2020-12819 |
A heap-based buffer overflow vulnerability in the processing of Link Control Protocol messages in FortiGate versions…
|
5.4
Medium
|
Dec 19, 2024 |
| CVE-2024-26011 |
A missing authentication for critical function vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2,…
|
5.2
Medium
|
Nov 12, 2024 |
| CVE-2024-33510 |
An improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability…
|
3.6
Low
|
Nov 12, 2024 |