| CVE-2025-22254 |
An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1,…
|
6.5
Medium
|
Jun 10, 2025 |
| CVE-2024-50565 |
A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS…
|
3.0
Low
|
Apr 8, 2025 |
| CVE-2024-46671 |
An Incorrect User Management vulnerability [CWE-286] in FortiWeb version 7.6.2 and below, version 7.4.6 and below,…
|
5.6
Medium
|
Apr 8, 2025 |
| CVE-2025-25254 |
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in FortiWeb…
|
6.8
Medium
|
Apr 8, 2025 |
| CVE-2023-25610 |
A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0…
|
9.3
Critical
|
Mar 24, 2025 |
| CVE-2024-55594 |
An improper handling of syntactically invalid structure in Fortinet FortiWeb at least vesrions 7.4.0 through 7.4.6 and…
|
5.5
Medium
|
Mar 14, 2025 |
| CVE-2022-29059 |
An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] in…
|
2.6
Low
|
Mar 14, 2025 |
| CVE-2024-45324 |
A use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.0 through 7.4.4, version…
|
7.0
High
|
Mar 11, 2025 |
| CVE-2023-42784 |
An improper handling of syntactically invalid structure in Fortinet FortiWeb at least verions 7.4.0 through 7.4.6 and…
|
5.5
Medium
|
Mar 11, 2025 |
| CVE-2024-55597 |
A improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiWeb versions 7.0.0…
|
5.2
Medium
|
Mar 11, 2025 |
| CVE-2024-50567 |
An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb 7.4.0…
|
6.8
Medium
|
Feb 11, 2025 |
| CVE-2024-50569 |
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb…
|
6.3
Medium
|
Feb 11, 2025 |
| CVE-2024-48885 |
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiRecorder…
|
5.2
Medium
|
Jan 16, 2025 |
| CVE-2024-21758 |
A stack-based buffer overflow in Fortinet FortiWeb versions 7.2.0 through 7.2.7, and 7.4.0 through 7.4.1 may allow a…
|
6.1
Medium
|
Jan 14, 2025 |
| CVE-2024-55593 |
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWeb versions…
|
2.6
Low
|
Jan 14, 2025 |
| CVE-2024-36509 |
An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiWeb…
|
3.8
Low
|
Nov 12, 2024 |
| CVE-2024-33509 |
An improper certificate validation vulnerability [CWE-295] in FortiWeb 7.2.0 through 7.2.1, 7.0 all versions, 6.4 all…
|
4.4
Medium
|
Jul 9, 2024 |
| CVE-2024-23665 |
Multiple improper authorization vulnerabilities [CWE-285] in FortiWeb version 7.4.2 and below, version 7.2.7 and…
|
5.6
Medium
|
Jun 3, 2024 |
| CVE-2024-23107 |
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiWeb version 7.4.0, version…
|
5.2
Medium
|
Jun 3, 2024 |
| CVE-2023-46713 |
An improper output neutralization for logs in Fortinet FortiWeb 6.2.0 - 6.2.8, 6.3.0 - 6.3.23, 7.0.0 - 7.0.9, 7.2.0 -…
|
4.9
Medium
|
Dec 13, 2023 |
| CVE-2023-34984 |
A protection mechanism failure in Fortinet FortiWeb 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4.0 through 6.4.3, 6.3.6…
|
7.1
High
|
Sep 13, 2023 |
| CVE-2023-23777 |
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78]…
|
7.2
High
|
Jul 11, 2023 |
| CVE-2023-33305 |
A loop with unreachable exit condition ('infinite loop') in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS…
|
4.9
Medium
|
Jun 13, 2023 |
| CVE-2022-43955 |
An improper neutralization of input during web page generation [CWE-79] in the FortiWeb web interface 7.0.0 through…
|
8.0
High
|
Apr 11, 2023 |
| CVE-2022-43948 |
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb…
|
6.5
Medium
|
Apr 11, 2023 |