| CVE-2025-22258 |
A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0…
|
5.7
Medium
|
Oct 14, 2025 |
| CVE-2025-57740 |
An Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version 7.4.7 and below,…
|
6.7
Medium
|
Oct 14, 2025 |
| CVE-2025-47890 |
An URL Redirection to Untrusted Site vulnerabilities [CWE-601] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3,…
|
2.5
Low
|
Oct 14, 2025 |
| CVE-2025-22862 |
An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] in FortiOS 7.4.0 through 7.4.7,…
|
6.3
Medium
|
Oct 2, 2025 |
| CVE-2024-26009 |
An authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet FortiOS 6.4.0 through…
|
7.9
High
|
Aug 12, 2025 |
| CVE-2025-25248 |
An Integer Overflow or Wraparound vulnerability [CWE-190] in FortiOS version 7.6.2 and below, version 7.4.7 and below,…
|
4.8
Medium
|
Aug 12, 2025 |
| CVE-2023-45584 |
A double free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS…
|
6.3
Medium
|
Aug 12, 2025 |
| CVE-2024-52965 |
A missing critical step in authentication vulnerability [CWE-304] in Fortinet FortiOS version 7.6.0 through 7.6.1, 7.4.0…
|
6.8
Medium
|
Jul 8, 2025 |
| CVE-2024-55599 |
An Improperly Implemented Security Check for Standard vulnerability [CWE-358] in FortiOS version 7.6.0, version 7.4.7…
|
4.9
Medium
|
Jul 8, 2025 |
| CVE-2024-50568 |
A channel accessible by non-endpoint vulnerability [CWE-300] in Fortinet FortiOS version 7.4.0 through 7.4.3, 7.2.0…
|
5.6
Medium
|
Jun 10, 2025 |
| CVE-2023-29184 |
An incomplete cleanup vulnerability [CWE-459] in FortiOS 7.2 all versions and before & FortiProxy version 7.2.0 through…
|
3.1
Low
|
Jun 10, 2025 |
| CVE-2025-22254 |
An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1,…
|
6.5
Medium
|
Jun 10, 2025 |
| CVE-2024-50562 |
An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL-VPN version 7.6.0, version 7.4.6 and below,…
|
4.4
Medium
|
Jun 10, 2025 |
| CVE-2025-22252 |
A missing authentication for critical function in Fortinet FortiProxy versions 7.6.0 through 7.6.1, FortiSwitchManager…
|
9.0
Critical
|
May 28, 2025 |
| CVE-2024-26013 |
A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS…
|
7.1
High
|
Apr 8, 2025 |
| CVE-2023-37930 |
Multiple issues including the use of uninitialized ressources [CWE-908] and excessive iteration [CWE-834]…
|
6.7
Medium
|
Apr 8, 2025 |
| CVE-2023-25610 |
A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0…
|
9.3
Critical
|
Mar 24, 2025 |
| CVE-2019-15706 |
An improper neutralization of input during web page generation in the SSL VPN portal of FortiProxy version 2.0.0,…
|
4.0
Medium
|
Mar 17, 2025 |
| CVE-2024-26006 |
An improper neutralization of input during web page Generation vulnerability [CWE-79] in FortiOS version 7.4.3 and…
|
6.9
Medium
|
Mar 14, 2025 |
| CVE-2024-45324 |
A use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.0 through 7.4.4, version…
|
7.0
High
|
Mar 11, 2025 |
| CVE-2025-24472 |
Exploited
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
|
8.1
High
|
Feb 11, 2025 |
| CVE-2023-40721 |
A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet allows a privileged…
|
6.3
Medium
|
Feb 11, 2025 |
| CVE-2022-23439 |
A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison…
|
4.1
Medium
|
Jan 22, 2025 |
| CVE-2024-54021 |
An Improper Neutralization of CRLF Sequences in HTTP Headers ('http response splitting') vulnerability [CWE-113] in…
|
6.4
Medium
|
Jan 14, 2025 |
| CVE-2024-48886 |
A weak authentication in Fortinet FortiOS versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.0.15, 6.4.0…
|
8.0
High
|
Jan 14, 2025 |