Vendor
Fortinet
1,116 known vulnerabilities.
Products
FortiOS 195
FortiManager 130
FortiProxy 109
FortiAnalyzer 108
FortiWeb 75
FortiManager Cloud 53
FortiSandbox 53
FortiMail 51
FortiAnalyzer Cloud 46
Fortinet FortiOS 46
FortiPAM 37
FortiADC 33
FortiClientWindows 32
Fortinet FortiWeb 30
FortiAuthenticator 30
FortiSIEM 26
FortiPortal 25
FortiNAC 23
FortiClientEMS 23
FortiVoice 21
Fortinet FortiPortal 19
FortiSwitchManager 19
FortiRecorder 16
FortiClientMac 16
Fortinet FortiMail 15
FortiSOAR 14
FortiWLM 14
FortiSOAR on-premise 13
FortiNDR 13
Fortinet FortiSandbox 12
FortiSOAR PaaS 11
FortiSandbox PaaS 11
FortiSwitch 9
FortiSandbox Cloud 9
FortiDDoS-F 9
Fortinet FortiWLM 9
Fortinet FortiManager 9
Fortinet FortiClientWindows 9
Fortinet FortiTester 8
Fortinet FortiADC 7
1,116 results · Feed
-
Medium 4.9
An exposure of sensitive information to an unauthorized actor vulnerability in FortiOS version 6.2.4 and below, version…
-
Low 3.6
A use of hard-coded cryptographic key vulnerability in FortiSIEM version 5.2.6 may allow a remote unauthenticated attac…
-
Medium 6.5
A use of hard-coded password vulnerability in FortiWLC version 8.5.2 and below, version 8.4.8 and below, version 8.3.3 …
-
Medium 4.8
An improper access control (CWE-284) vulnerability in FortiWLC version 8.6.0, version 8.5.3 and below, version 8.4.8 an…
-
High 7.8
A Use of Hard-coded Cryptographic Key vulnerability [CWE-321] in FortiSandbox version 4.4.6 and below, version 4.2.7 an…
-
Medium 4.2
An improper neutralization of input during web page generation in FortiWLC version 8.6.0, version 8.5.3 and below, vers…
-
Medium 4.0
An improper neutralization of input during web page generation in the SSL VPN portal of FortiProxy version 2.0.0, versi…
-
Medium 5.5
An improper handling of syntactically invalid structure in Fortinet FortiWeb at least vesrions 7.4.0 through 7.4.6 and …
-
Medium 4.4
An improper certificate validation vulnerability [CWE-295] in FortiNAC-F version 7.2.4 and below may allow a remote and…
-
Medium 4.8CVE-2023-33300 EPSS 14%
A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiNAC 7.2.1 and ea…
-
High 7.8
An external control of file name or path vulnerability [CWE-73] in FortiClientMac version 7.2.3 and below, version 7.0.…
-
Medium 5.9
An insertion of sensitive information into log file vulnerabilities [CWE-532] in FortiManager version 7.4.0, version 7.…
-
Low 2.6
An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] in Forti…
-
Medium 6.0
An improper validation of integrity check value vulnerability [CWE-354] in FortiNDR version 7.4.2 and below, version 7.…
-
High 8.3
A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiManager versions…
-
Medium 4.4
An improper certificate validation vulnerability [CWE-295] in FortiPortal version 7.4.0, version 7.2.4 and below, versi…
-
Medium 6.9
An improper neutralization of input during web page Generation vulnerability [CWE-79] in FortiOS version 7.4.3 and belo…
-
Medium 4.0
Two improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in Fort…
-
Medium 6.5
Multiple improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiMa…
-
Medium 4.1
An improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiSandbox 4.4.0 …
-
Medium 6.5CVE-2024-54018 EPSS 10%
Multiple improper neutralization of special elements used in an OS Command vulnerabilities [CWE-78] in FortiSandbox bef…
-
High 8.6
An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in Forti…
-
Medium 4.2
A client-side enforcement of server-side security vulnerability [CWE-602] in Fortinet FortiSandbox version 5.0.0, 4.4.0…
-
High 8.6
Multiple improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CW…
-
High 7.0
A use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.0 through 7.4.4, version 7.…
-
High 7.1
A cross site request forgery vulnerability [CWE-352] in Fortinet FortiNDR version 7.4.0, 7.2.0 through 7.2.1 and 7.1.0 …
-
Medium 6.5
A stack-buffer overflow vulnerability [CWE-121] in Fortinet FortiMail CLI version 7.6.0 through 7.6.1 and before 7.4.3 …
-
High 8.6
An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] vulnerability in Fortinet F…
-
Low 3.6
An incorrect authorization vulnerability [CWE-863] in FortiSIEM 7.2 all versions, 7.1 all versions, 7.0 all versions, 6…
-
High 7.7
An exposure of sensitive information to an unauthorized actor in Fortinet FortiSIEM version 6.7.0 through 6.7.4 and 6.6…
-
Medium 5.5
An improper handling of syntactically invalid structure in Fortinet FortiWeb at least verions 7.4.0 through 7.4.6 and 7…
-
High 7.1
An incorrect authorization vulnerability [CWE-863] in FortiSandbox 4.4.0 through 4.4.6 may allow a low priviledged admi…
-
Medium 5.2
A improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiWeb versions 7.0.0 th…
-
High 8.1
An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS 7.0.0 through 7.0…
KEV Mar 18, 2025 -
Low 2.2
Multiple Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabilities [CWE-79] …
-
Medium 6.9CVE-2024-27781 EPSS 28%
An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet Forti…
-
Medium 5.9
An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet Fo…
-
Medium 6.8
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in…
-
Medium 6.3
A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet allows a privileged atta…
-
Medium 6.3CVE-2024-40586 Public exploit
An Improper Access Control vulnerability [CWE-284] in FortiClient Windows version 7.4.0, version 7.2.6 and below, versi…