Vendor
Fortinet
1,116 known vulnerabilities.
Products
FortiOS 195
FortiManager 130
FortiProxy 109
FortiAnalyzer 108
FortiWeb 75
FortiManager Cloud 53
FortiSandbox 53
FortiMail 51
FortiAnalyzer Cloud 46
Fortinet FortiOS 46
FortiPAM 37
FortiADC 33
FortiClientWindows 32
Fortinet FortiWeb 30
FortiAuthenticator 30
FortiSIEM 26
FortiPortal 25
FortiNAC 23
FortiClientEMS 23
FortiVoice 21
Fortinet FortiPortal 19
FortiSwitchManager 19
FortiRecorder 16
FortiClientMac 16
Fortinet FortiMail 15
FortiSOAR 14
FortiWLM 14
FortiSOAR on-premise 13
FortiNDR 13
Fortinet FortiSandbox 12
FortiSOAR PaaS 11
FortiSandbox PaaS 11
FortiSwitch 9
FortiSandbox Cloud 9
FortiDDoS-F 9
Fortinet FortiWLM 9
Fortinet FortiManager 9
Fortinet FortiClientWindows 9
Fortinet FortiTester 8
Fortinet FortiADC 7
1,116 results · Feed
-
Medium 4.4
A use of hard-coded credentials vulnerability in Fortinet FortiClient Windows 7.0.0 - 7.0.9 and 7.2.0 - 7.2.1 allows an…
-
Medium 4.0
An improper access control vulnerability [CWE-284] in FortiEDRCollectorWindows version 5.2.0.4549 and below, 5.0.3.1007…
-
High 7.9
An improper access control vulnerability [CWE-284] in FortiADC automation feature 7.1.0 through 7.1.2, 7.0 all versions…
-
Low 2.1
An insertion of sensitive information into log file vulnerability [CWE-532] in FortiSIEM version 7.0.0, version 6.7.6 a…
-
Medium 4.2
An exposure of sensitive information to an unauthorized actor [CWE-200] in FortiSIEM version 7.0.0 and before 6.7.5 may…
-
Medium 5.3
An improper restriction of excessive authentication attempts vulnerability [CWE-307] in FortiMail webmail version 7.2.0…
-
Critical 9.3
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSIEM vers…
-
Medium 5.8
An improper validation of integrity check value vulnerability [CWE-354] in FortiOS 7.2.0 through 7.2.3, 7.0.0 through 7…
-
Medium 6.2
A numeric truncation error vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through …
-
High 7.4
A untrusted search path vulnerability in Fortinet FortiClientWindows 7.0.9 allows an attacker to perform a DLL Hijack a…
-
High 7.3
A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 and 8.4.2 through 8.…
-
Medium 6.4
A server-side request forgery vulnerability [CWE-918] in Fortinet FortiAnalyzer version 7.4.0, version 7.2.0 through 7.…
-
Low 3.4
An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet Forti…
-
High 7.3
A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiS…
-
High 7.3
A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiS…
-
High 7.3
A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiS…
-
High 7.9
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox…
-
High 7.7
A insufficient session expiration in Fortinet FortiEDR version 5.0.0 through 5.0.1 allows attacker to execute unauthori…
-
High 7.7
An improper access control vulnerability [CWE-284] in FortiManager management interface 7.2.0 through 7.2.2, 7.0.0 thro…
-
High 7.4
An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78 ] i…
-
Medium 6.5
A use of GET request method with sensitive query strings vulnerability in Fortinet FortiOS 7.0.0 - 7.0.12, 7.2.0 - 7.2.…
-
Critical 9.6
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versi…
-
Critical 9.6
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versi…
-
Critical 9.6
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versi…
-
Critical 9.6
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versi…
-
High 8.6
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versi…
-
High 8.6
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versi…
-
High 8.6
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versi…
-
High 8.6
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versi…
-
High 8.6
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versi…
-
High 8.6
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versi…
-
Medium 5.0
A insufficient verification of data authenticity vulnerability [CWE-345] in FortiAnalyzer version 7.4.0 and below 7.2.3…
-
Critical 9.7
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet …
-
Low 3.4
An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiMail version 7.2.0 throug…
-
Low 3.0
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClient for Windows 7.2.0,…
-
Medium 4.8
A use after free vulnerability [CWE-416] in FortiOS version 7.2.0 through 7.2.4 and version 7.0.0 through 7.0.10 and Fo…
-
High 8.6
An incorrect authorization vulnerability [CWE-863] in FortiMail webmail version 7.2.0 through 7.2.2, version 7.0.0 thro…
-
Medium 6.7
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiIsolator …
-
Medium 5.5
An insertion of sensitive information into log file vulnerability in Fortinet FortiGuest 1.0.0 allows a local attacker …
-
High 7.4
An improper authorization vulnerability in Fortinet FortiOS 7.0.0 - 7.0.11 and 7.2.0 - 7.2.4 allows an attacker belongi…