| CVE-2024-48884 |
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet…
|
6.7
Medium
|
Jan 14, 2025 |
| CVE-2023-46715 |
An origin validation error [CWE-346] vulnerability in Fortinet FortiOS IPSec VPN version 7.4.0 through 7.4.1 and…
|
4.7
Medium
|
Jan 14, 2025 |
| CVE-2024-46670 |
An Out-of-bounds Read vulnerability [CWE-125] in FortiOS version 7.6.0, version 7.4.4 and below, version 7.2.9 and below…
|
7.5
High
|
Jan 14, 2025 |
| CVE-2024-55591 |
Exploited
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
|
9.6
Critical
|
Jan 14, 2025 |
| CVE-2024-52963 |
A out-of-bounds write in Fortinet FortiOS versions 7.6.0, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through…
|
3.5
Low
|
Jan 14, 2025 |
| CVE-2024-26011 |
A missing authentication for critical function vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2,…
|
5.2
Medium
|
Nov 12, 2024 |
| CVE-2024-33510 |
An improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability…
|
3.6
Low
|
Nov 12, 2024 |
| CVE-2022-45862 |
An insufficient session expiration vulnerability [CWE-613] vulnerability in FortiOS 7.2.5 and below, 7.0 all versions,…
|
3.5
Low
|
Aug 13, 2024 |
| CVE-2024-26015 |
An incorrect parsing of numbers with different radices vulnerability [CWE-1389] in FortiProxy version 7.4.3 and below,…
|
3.1
Low
|
Jul 9, 2024 |
| CVE-2024-26010 |
A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.3, FortiOS 7.2.0 through 7.2.7,…
|
6.7
Medium
|
Jun 11, 2024 |
| CVE-2024-21754 |
A use of password hash with insufficient computational effort vulnerability [CWE-916] affecting FortiOS version 7.4.3…
|
1.7
Low
|
Jun 11, 2024 |
| CVE-2024-23111 |
An improper neutralization of input during web page Generation ('Cross-site Scripting') vulnerability [CWE-79] in…
|
6.2
Medium
|
Jun 11, 2024 |
| CVE-2023-36640 |
A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5,…
|
6.2
Medium
|
May 14, 2024 |
| CVE-2023-45583 |
A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5,…
|
6.2
Medium
|
May 14, 2024 |
| CVE-2023-45586 |
An insufficient verification of data authenticity vulnerability [CWE-345] in Fortinet FortiOS SSL-VPN tunnel mode…
|
4.7
Medium
|
May 14, 2024 |
| CVE-2023-41677 |
A insufficiently protected credentials vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through…
|
7.5
High
|
Apr 9, 2024 |
| CVE-2023-42789 |
A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS…
|
9.3
Critical
|
Mar 12, 2024 |
| CVE-2024-23112 |
An authorization bypass through user-controlled key vulnerability [CWE-639] in FortiOS version 7.4.0 through 7.4.1,…
|
7.2
High
|
Mar 12, 2024 |
| CVE-2023-42790 |
A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5,…
|
7.7
High
|
Mar 12, 2024 |
| CVE-2023-29180 |
A null pointer dereference vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4, FortiOS 7.0.0 through 7.0.11,…
|
7.3
High
|
Feb 22, 2024 |
| CVE-2023-29179 |
A null pointer dereference in Fortinet FortiOS version 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through…
|
6.4
Medium
|
Feb 22, 2024 |
| CVE-2023-29181 |
A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4, FortiOS 7.0.0…
|
8.3
High
|
Feb 22, 2024 |
| CVE-2024-23113 |
Exploited
Fortinet Multiple Products Format String Vulnerability
|
9.8
Critical
|
Feb 15, 2024 |
| CVE-2024-21762 |
Exploited
Fortinet FortiOS Out-of-Bound Write Vulnerability
|
9.6
Critical
|
Feb 9, 2024 |
| CVE-2023-44250 |
An improper privilege management vulnerability [CWE-269] in a Fortinet FortiOS HA cluster version 7.4.0 through 7.4.1…
|
8.3
High
|
Jan 10, 2024 |