| CVE-2023-26207 |
An insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4 and FortiProxy…
|
3.3
Low
|
Jun 13, 2023 |
| CVE-2023-22639 |
A out-of-bounds write in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0 through 7.0.10, FortiOS…
|
6.3
Medium
|
Jun 13, 2023 |
| CVE-2022-43953 |
A use of externally-controlled format string in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS all versions…
|
6.3
Medium
|
Jun 13, 2023 |
| CVE-2022-42474 |
A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0…
|
6.2
Medium
|
Jun 13, 2023 |
| CVE-2022-41327 |
A cleartext transmission of sensitive information vulnerability [CWE-319] in Fortinet FortiOS version 7.2.0 through…
|
7.6
High
|
Jun 13, 2023 |
| CVE-2023-22640 |
A out-of-bounds write vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0 through 7.0.10, FortiOS 6.4.0…
|
7.1
High
|
May 3, 2023 |
| CVE-2022-42469 |
A permissive list of allowed inputs vulnerability [CWE-183] in FortiGate version 7.2.3 and below, version 7.0.9 and…
|
4.1
Medium
|
Apr 11, 2023 |
| CVE-2022-43947 |
An improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiOS version 7.2.0…
|
4.7
Medium
|
Apr 11, 2023 |
| CVE-2023-22641 |
A url redirection to untrusted site ('open redirect') in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version…
|
4.1
Medium
|
Apr 11, 2023 |
| CVE-2022-41330 |
An improper neutralization of input during web page generation vulnerability ('Cross-site Scripting') [CWE-79] in…
|
8.3
High
|
Apr 11, 2023 |
| CVE-2022-41329 |
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiProxy version…
|
5.2
Medium
|
Mar 7, 2023 |
| CVE-2022-42476 |
A relative path traversal vulnerability [CWE-23] vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0…
|
7.8
High
|
Mar 7, 2023 |
| CVE-2022-45861 |
An access of uninitialized pointer vulnerability [CWE-824] in the SSL VPN portal of Fortinet FortiOS version 7.2.0…
|
6.4
Medium
|
Mar 7, 2023 |
| CVE-2022-41328 |
Exploited
Fortinet FortiOS Path Traversal Vulnerability
|
6.5
Medium
|
Mar 7, 2023 |
| CVE-2022-29054 |
A missing cryptographic steps vulnerability [CWE-325] in the functions that encrypt the DHCP and DNS keys in Fortinet…
|
3.1
Low
|
Feb 16, 2023 |
| CVE-2022-42472 |
A improper neutralization of crlf sequences in http headers ('http response splitting') vulnerability in Fortinet…
|
4.0
Medium
|
Feb 16, 2023 |
| CVE-2022-38378 |
An improper privilege management vulnerability [CWE-269] in Fortinet FortiOS version 7.2.0 and before 7.0.7 and…
|
4.0
Medium
|
Feb 16, 2023 |
| CVE-2022-41334 |
An improper neutralization of input during web page generation [CWE-79] vulnerability in FortiOS versions 7.0.0 to 7.0.7…
|
8.6
High
|
Feb 16, 2023 |
| CVE-2022-39948 |
An improper certificate validation vulnerability [CWE-295] in FortiOS 7.2.0 through 7.2.3, 7.0.0 through 7.0.7, 6.4…
|
4.4
Medium
|
Feb 16, 2023 |
| CVE-2021-43074 |
An improper verification of cryptographic signature vulnerability [CWE-347] in FortiWeb 6.4 all versions, 6.3.16 and…
|
4.1
Medium
|
Feb 16, 2023 |
| CVE-2022-41335 |
A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.8…
|
8.6
High
|
Feb 16, 2023 |
| CVE-2022-42475 |
Exploited
Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability
|
9.3
Critical
|
Jan 2, 2023 |
| CVE-2022-40680 |
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiOS 6.0.7 -…
|
3.8
Low
|
Dec 6, 2022 |
| CVE-2022-35843 |
An authentication bypass by assumed-immutable data vulnerability [CWE-302] in the FortiOS SSH login component 7.2.0, …
|
7.7
High
|
Dec 6, 2022 |
| CVE-2021-42757 |
A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may…
|
6.3
Medium
|
Dec 8, 2021 |