Vendor
Fortinet
1,116 known vulnerabilities.
Products
FortiOS 195
FortiManager 130
FortiProxy 109
FortiAnalyzer 108
FortiWeb 75
FortiManager Cloud 53
FortiSandbox 53
FortiMail 51
FortiAnalyzer Cloud 46
Fortinet FortiOS 46
FortiPAM 37
FortiADC 33
FortiClientWindows 32
Fortinet FortiWeb 30
FortiAuthenticator 30
FortiSIEM 26
FortiPortal 25
FortiNAC 23
FortiClientEMS 23
FortiVoice 21
Fortinet FortiPortal 19
FortiSwitchManager 19
FortiRecorder 16
FortiClientMac 16
Fortinet FortiMail 15
FortiSOAR 14
FortiWLM 14
FortiSOAR on-premise 13
FortiNDR 13
Fortinet FortiSandbox 12
FortiSOAR PaaS 11
FortiSandbox PaaS 11
FortiSwitch 9
FortiSandbox Cloud 9
FortiDDoS-F 9
Fortinet FortiWLM 9
Fortinet FortiManager 9
Fortinet FortiClientWindows 9
Fortinet FortiTester 8
Fortinet FortiADC 7
66 results · Clear filters · Feed
-
Low 3.5CVE-2023-26209 Public exploit
A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiDeceptor 3.1.x and…
-
Low 3.5CVE-2023-26208 Public exploit
A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiAuthenticator 6.4.…
-
Low 3.5CVE-2022-29056 Public exploit
A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiMail version 6.4.0…
-
Medium 6.8CVE-2022-41333 Public exploit
An uncontrolled resource consumption vulnerability [CWE-400] in FortiRecorder version 6.4.3 and below, 6.0.11 and below…
-
Critical 9.8
A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, …
-
Critical 9.3
Multiple stack-based buffer overflow vulnerabilities [CWE-121] in the proxy daemon of FortiWeb 5.x all versions, 6.0.7 …
-
Critical 9.3
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0…
KEV Dec 13, 2022 -
High 8.8CVE-2022-38374 Public exploit
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiADC 7.0.0 - 7.0…
-
Critical 9.8
An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 a…
KEV Oct 11, 2022 -
Medium 6.1
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiMail version 7.…
-
Low 3.3
A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0…
KEV Dec 10, 2021 -
High 8.1CVE-2021-24019 Public exploit
An insufficient session expiration vulnerability [CWE- 613] in FortiClientEMS versions 6.4.2 and below, 6.2.8 and below…
-
Medium 6.3CVE-2021-24006 Public exploit
An improper access control vulnerability in FortiManager versions 6.4.0 to 6.4.3 may allow an authenticated attacker wi…
-
High 7.1CVE-2021-26088 Public exploit
An improper authentication vulnerability in FSSO Collector version 5.0.295 and below may allow an unauthenticated user …
-
High 7.6
An OS command injection vulnerability in FortiWeb's management interface 6.3.7 and below, 6.2.3 and below, 6.1.x, 6.0.x…
-
Medium 6.5
A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept …
KEV Nov 3, 2021 -
Unscored —
An improper authentication vulnerability in FortiMail 5.4.10, 6.0.7, 6.2.2 and earlier and FortiVoiceEntreprise 6.0.0 a…
-
Unscored —CVE-2019-17658 Public exploit
An unquoted service path vulnerability in the FortiClient FortiTray component of FortiClientWindows v6.2.2 and prior al…
-
Medium 6.5
Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attack…
KEV Jun 25, 2025 -
Critical 9.1
An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5.4.1 to 5.4.10 and Fort…
KEV Jan 10, 2022 -
Critical 9.1
An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5…
KEV Nov 3, 2021 -
Medium 4.3
A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 a…
KEV Sep 8, 2022 -
Unscored —CVE-2017-14187 Public exploit
A local privilege escalation and local code execution vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8,…
-
Unscored —
A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to execute unautho…
-
Unscored —
A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 and 5.6.0 allows attackers to exe…
-
Unscored —
A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to Execute unautho…