Vendor
Fortinet
1,116 known vulnerabilities.
Products
FortiOS 195
FortiManager 130
FortiProxy 109
FortiAnalyzer 108
FortiWeb 75
FortiManager Cloud 53
FortiSandbox 53
FortiMail 51
FortiAnalyzer Cloud 46
Fortinet FortiOS 46
FortiPAM 37
FortiADC 33
FortiClientWindows 32
Fortinet FortiWeb 30
FortiAuthenticator 30
FortiSIEM 26
FortiPortal 25
FortiNAC 23
FortiClientEMS 23
FortiVoice 21
Fortinet FortiPortal 19
FortiSwitchManager 19
FortiRecorder 16
FortiClientMac 16
Fortinet FortiMail 15
FortiSOAR 14
FortiWLM 14
FortiSOAR on-premise 13
FortiNDR 13
Fortinet FortiSandbox 12
FortiSOAR PaaS 11
FortiSandbox PaaS 11
FortiSwitch 9
FortiSandbox Cloud 9
FortiDDoS-F 9
Fortinet FortiWLM 9
Fortinet FortiManager 9
Fortinet FortiClientWindows 9
Fortinet FortiTester 8
Fortinet FortiADC 7
508 results · Clear filters · Feed
-
Medium 4.8
An allocation of resources without limits or throttling [CWE-770] vulnerability in FortiOS versions 7.6.0, versions 7.4…
-
Medium 6.1
A stack-based buffer overflow in Fortinet FortiWeb versions 7.2.0 through 7.2.7, and 7.4.0 through 7.4.1 may allow a pr…
-
Medium 6.3
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiAP-S 6.2 …
-
Medium 6.4
An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager, FortiAnalyz…
-
Medium 6.3
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in…
-
Medium 4.9
An observable response discrepancy vulnerability [CWE-204] in FortiClientEMS 7.4.0, 7.2.0 through 7.2.4, 7.0 all versio…
-
Medium 6.4
An Improper Neutralization of CRLF Sequences in HTTP Headers ('http response splitting') vulnerability [CWE-113] in For…
-
Medium 4.1
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiPortal versions…
-
Medium 5.2
A relative path traversal in Fortinet FortiRecorder [CWE-23] version 7.2.0 through 7.2.1 and before 7.0.4 allows a priv…
-
Medium 6.3
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in…
-
Medium 4.8
A improper limitation of a pathname to a restricted directory ('path traversal') [CWE-23] in Fortinet FortiRecorder ver…
-
Medium 6.7
A improper privilege management vulnerability in Fortinet FortiManager Cloud 7.4.1 through 7.4.3, FortiManager Cloud 7.…
-
Medium 6.5
An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiMail ver…
-
Medium 6.7CVE-2024-48884 EPSS 15%
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager…
-
Medium 4.7
An origin validation error [CWE-346] vulnerability in Fortinet FortiOS IPSec VPN version 7.4.0 through 7.4.1 and versio…
-
Medium 6.4
A null pointer dereference in FortiOS versions 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0 all versions, 6.4 all vers…
-
Medium 5.0
A stack-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7.2.0 through …
-
Medium 6.5
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiAnalyzer versio…
-
Medium 6.4
A null pointer dereference in FortiOS versions 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0 all versions, 6.4 all vers…
-
Medium 6.4
An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiSOAR 7.3.0 through 7.3.3,…
-
Medium 5.4
Under non-default configuration, a stack-based buffer overflow in FortiOS version 6.0.10 and below, version 5.6.12 and …
-
Medium 6.6
An access of uninitialized pointer (CWE-824) vulnerability in FortiWLC versions 8.6.0, 8.5.3 and earlier may allow a lo…
-
Medium 5.4
A heap-based buffer overflow vulnerability in the processing of Link Control Protocol messages in FortiGate versions 5.…
-
Medium 4.9
A Cleartext Storage of Sensitive Information vulnerability [CWE-312] in FortiClientWindows 7.4.0 through 7.4.1, 7.2.0 t…
-
Medium 6.3
A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7…
-
Medium 5.3
A heap-based buffer overflow in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through …
-
Medium 6.3
Multiple improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CW…
-
Medium 5.2
A missing authentication for critical function vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager…
-
Medium 4.8
Multiple relative path traversal vulnerabilities [CWE-23] in Fortinet FortiManager version 7.4.0 through 7.4.2 and befo…
-
Medium 5.1
An authorization bypass through user-controlled key vulnerability [CWE-639] in Fortinet FortiPortal version 7.0.0 throu…
-
Medium 4.7
An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet Fo…
-
Medium 6.8
An improper verification of cryptographic signature vulnerability [CWE-347] in FortiClient MacOS version 7.4.0, version…
-
Medium 6.7
A untrusted search path in Fortinet FortiClientWindows versions 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 th…
-
Medium 4.0
A session fixation vulnerability in Fortinet FortiOS 7.4.0 through 7.4.3, FortiOS 7.2.0 through 7.2.7, FortiOS 7.0.0 th…
-
Medium 6.8
A use of externally-controlled format string in Fortinet FortiAnalyzer versions 7.4.0 through 7.4.3, 7.2.2 through 7.2.…
-
Medium 4.6
An improper certificate validation vulnerability [CWE-295] in FortiClientWindows 6.4 all versions, 7.0.0 through 7.0.7,…
-
Medium 6.4
AAn improper certificate validation vulnerability [CWE-295] in FortiClientWindows 7.2.0 through 7.2.2, 7.0.0 through 7.…
-
Medium 5.5
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiClientE…
-
Medium 4.7
An authorization bypass through user-controlled key [CWE-639] vulnerability in FortiAnalyzer version 7.4.1 and before 7…
-
Medium 6.9
An improper neutralization of special elements used in a command ('Command Injection') vulnerability [CWE-77] in Fortin…