Aller au contenu

Vulnérabilités de Fortinet FortiOS

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2023-26207 An insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4 and FortiProxy… 3.3 Faible 13 juin 2023
CVE-2023-22639 A out-of-bounds write in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0 through 7.0.10, FortiOS… 6.3 Moyenne 13 juin 2023
CVE-2022-43953 A use of externally-controlled format string in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS all versions… 6.3 Moyenne 13 juin 2023
CVE-2022-42474 A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0… 6.2 Moyenne 13 juin 2023
CVE-2022-41327 A cleartext transmission of sensitive information vulnerability [CWE-319] in Fortinet FortiOS version 7.2.0 through… 7.6 Élevée 13 juin 2023
CVE-2023-22640 A out-of-bounds write vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0 through 7.0.10, FortiOS 6.4.0… 7.1 Élevée 3 mai 2023
CVE-2022-42469 A permissive list of allowed inputs vulnerability [CWE-183] in FortiGate version 7.2.3 and below, version 7.0.9 and… 4.1 Moyenne 11 avr. 2023
CVE-2022-43947 An improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiOS version 7.2.0… 4.7 Moyenne 11 avr. 2023
CVE-2023-22641 A url redirection to untrusted site ('open redirect') in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version… 4.1 Moyenne 11 avr. 2023
CVE-2022-41330 An improper neutralization of input during web page generation vulnerability ('Cross-site Scripting') [CWE-79] in… 8.3 Élevée 11 avr. 2023
CVE-2022-41329 An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiProxy version… 5.2 Moyenne 7 mars 2023
CVE-2022-42476 A relative path traversal vulnerability [CWE-23] vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0… 7.8 Élevée 7 mars 2023
CVE-2022-45861 An access of uninitialized pointer vulnerability [CWE-824] in the SSL VPN portal of Fortinet FortiOS version 7.2.0… 6.4 Moyenne 7 mars 2023
CVE-2022-41328 Exploitée Fortinet FortiOS Path Traversal Vulnerability 6.5 Moyenne 7 mars 2023
CVE-2022-29054 A missing cryptographic steps vulnerability [CWE-325] in the functions that encrypt the DHCP and DNS keys in Fortinet… 3.1 Faible 16 févr. 2023
CVE-2022-42472 A improper neutralization of crlf sequences in http headers ('http response splitting') vulnerability in Fortinet… 4.0 Moyenne 16 févr. 2023
CVE-2022-38378 An improper privilege management vulnerability [CWE-269] in Fortinet FortiOS version 7.2.0 and before 7.0.7 and… 4.0 Moyenne 16 févr. 2023
CVE-2022-41334 An improper neutralization of input during web page generation [CWE-79] vulnerability in FortiOS versions 7.0.0 to 7.0.7… 8.6 Élevée 16 févr. 2023
CVE-2022-39948 An improper certificate validation vulnerability [CWE-295] in FortiOS 7.2.0 through 7.2.3, 7.0.0 through 7.0.7, 6.4… 4.4 Moyenne 16 févr. 2023
CVE-2021-43074 An improper verification of cryptographic signature vulnerability [CWE-347] in FortiWeb 6.4 all versions, 6.3.16 and… 4.1 Moyenne 16 févr. 2023
CVE-2022-41335 A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.8… 8.6 Élevée 16 févr. 2023
CVE-2022-42475 Exploitée Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability 9.3 Critique 2 janv. 2023
CVE-2022-40680 A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiOS 6.0.7 -… 3.8 Faible 6 déc. 2022
CVE-2022-35843 An authentication bypass by assumed-immutable data vulnerability [CWE-302] in the FortiOS SSH login component 7.2.0, … 7.7 Élevée 6 déc. 2022
CVE-2021-42757 A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may… 6.3 Moyenne 8 déc. 2021

Autres produits Fortinet