| CVE-2024-23113 |
Exploited
Fortinet Multiple Products Format String Vulnerability
|
9.8
Critical
|
Feb 15, 2024 |
| CVE-2023-47537 |
An improper certificate validation vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.6,…
|
4.4
Medium
|
Feb 15, 2024 |
| CVE-2024-21762 |
Exploited
Fortinet FortiOS Out-of-Bound Write Vulnerability
|
9.6
Critical
|
Feb 9, 2024 |
| CVE-2023-44250 |
An improper privilege management vulnerability [CWE-269] in a Fortinet FortiOS HA cluster version 7.4.0 through 7.4.1…
|
8.3
High
|
Jan 10, 2024 |
| CVE-2023-47536 |
An improper access control vulnerability [CWE-284] in FortiOS version 7.2.0, version 7.0.13 and below, version 6.4.14…
|
2.8
Low
|
Dec 13, 2023 |
| CVE-2023-41678 |
A double free in Fortinet FortiOS versions 7.0.0 through 7.0.5, FortiPAM version 1.0.0 through 1.0.3, 1.1.0 through…
|
8.3
High
|
Dec 13, 2023 |
| CVE-2023-36639 |
A use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.4, 7.0.0 through…
|
7.0
High
|
Dec 13, 2023 |
| CVE-2023-28002 |
An improper validation of integrity check value vulnerability [CWE-354] in FortiOS 7.2.0 through 7.2.3, 7.0.0 through…
|
5.8
Medium
|
Nov 14, 2023 |
| CVE-2023-36641 |
A numeric truncation error vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through…
|
6.2
Medium
|
Nov 14, 2023 |
| CVE-2023-37935 |
A use of GET request method with sensitive query strings vulnerability in Fortinet FortiOS 7.0.0 - 7.0.12, 7.2.0 - 7.2.5…
|
6.5
Medium
|
Oct 10, 2023 |
| CVE-2023-41675 |
A use after free vulnerability [CWE-416] in FortiOS version 7.2.0 through 7.2.4 and version 7.0.0 through 7.0.10 and…
|
4.8
Medium
|
Oct 10, 2023 |
| CVE-2023-41841 |
An improper authorization vulnerability in Fortinet FortiOS 7.0.0 - 7.0.11 and 7.2.0 - 7.2.4 allows an attacker…
|
7.4
High
|
Oct 10, 2023 |
| CVE-2023-36555 |
An improper neutralization of script-related html tags in a web page (basic xss) in Fortinet FortiOS 7.2.0 - 7.2.4…
|
3.9
Low
|
Oct 10, 2023 |
| CVE-2023-33301 |
An improper access control vulnerability in Fortinet FortiOS 7.2.0 - 7.2.4 and 7.4.0 allows an attacker to access a…
|
6.5
Medium
|
Oct 10, 2023 |
| CVE-2023-29183 |
An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in…
|
7.3
High
|
Sep 13, 2023 |
| CVE-2023-29182 |
A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiOS before 7.0.3 allows a privileged attacker to…
|
6.4
Medium
|
Aug 17, 2023 |
| CVE-2023-33308 |
A stack-based overflow vulnerability [CWE-124] in Fortinet FortiOS version 7.0.0 through 7.0.10 and 7.2.0 through…
|
9.8
Critical
|
Jul 26, 2023 |
| CVE-2023-28001 |
An insufficient session expiration in Fortinet FortiOS 7.0.0 - 7.0.12 and 7.2.0 - 7.2.4 allows an attacker to execute…
|
4.1
Medium
|
Jul 11, 2023 |
| CVE-2022-22302 |
A clear text storage of sensitive information (CWE-312) vulnerability in both FortiGate version 6.4.0 through 6.4.1,…
|
5.3
Medium
|
Jul 11, 2023 |
| CVE-2023-33307 |
A null pointer dereference in Fortinet FortiOS before 7.2.5 and before 7.0.11, FortiProxy before 7.2.3 and before…
|
6.4
Medium
|
Jun 16, 2023 |
| CVE-2023-33306 |
A null pointer dereference in Fortinet FortiOS before 7.2.5, before 7.0.11 and before 6.4.13, FortiProxy before 7.2.4…
|
6.2
Medium
|
Jun 16, 2023 |
| CVE-2023-33305 |
A loop with unreachable exit condition ('infinite loop') in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS…
|
4.9
Medium
|
Jun 13, 2023 |
| CVE-2023-29178 |
A access of uninitialized pointer vulnerability [CWE-824] vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4, FortiOS…
|
3.9
Low
|
Jun 13, 2023 |
| CVE-2023-29175 |
An improper certificate validation vulnerability [CWE-295] in FortiOS 6.2 all versions, 6.4 all versions, 7.0.0…
|
4.4
Medium
|
Jun 13, 2023 |
| CVE-2023-27997 |
Exploited
Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability
|
9.2
Critical
|
Jun 13, 2023 |