| CVE-2022-29054 |
A missing cryptographic steps vulnerability [CWE-325] in the functions that encrypt the DHCP and DNS keys in Fortinet…
|
3.1
Low
|
Feb 16, 2023 |
| CVE-2022-42472 |
A improper neutralization of crlf sequences in http headers ('http response splitting') vulnerability in Fortinet…
|
4.0
Medium
|
Feb 16, 2023 |
| CVE-2022-38378 |
An improper privilege management vulnerability [CWE-269] in Fortinet FortiOS version 7.2.0 and before 7.0.7 and…
|
4.0
Medium
|
Feb 16, 2023 |
| CVE-2022-39948 |
An improper certificate validation vulnerability [CWE-295] in FortiOS 7.2.0 through 7.2.3, 7.0.0 through 7.0.7, 6.4…
|
4.4
Medium
|
Feb 16, 2023 |
| CVE-2021-43074 |
An improper verification of cryptographic signature vulnerability [CWE-347] in FortiWeb 6.4 all versions, 6.3.16 and…
|
4.1
Medium
|
Feb 16, 2023 |
| CVE-2022-41335 |
A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.8…
|
8.6
High
|
Feb 16, 2023 |
| CVE-2022-42475 |
Exploited
Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability
|
9.3
Critical
|
Jan 2, 2023 |
| CVE-2022-40680 |
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiOS 6.0.7 -…
|
3.8
Low
|
Dec 6, 2022 |
| CVE-2022-35843 |
An authentication bypass by assumed-immutable data vulnerability [CWE-302] in the FortiOS SSH login component 7.2.0, …
|
7.7
High
|
Dec 6, 2022 |
| CVE-2021-42757 |
A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may…
|
6.3
Medium
|
Dec 8, 2021 |