Vendor
Fortinet
1,116 known vulnerabilities.
Products
FortiOS 195
FortiManager 130
FortiProxy 109
FortiAnalyzer 108
FortiWeb 75
FortiManager Cloud 53
FortiSandbox 53
FortiMail 51
FortiAnalyzer Cloud 46
Fortinet FortiOS 46
FortiPAM 37
FortiADC 33
FortiClientWindows 32
Fortinet FortiWeb 30
FortiAuthenticator 30
FortiSIEM 26
FortiPortal 25
FortiNAC 23
FortiClientEMS 23
FortiVoice 21
Fortinet FortiPortal 19
FortiSwitchManager 19
FortiRecorder 16
FortiClientMac 16
Fortinet FortiMail 15
FortiSOAR 14
FortiWLM 14
FortiSOAR on-premise 13
FortiNDR 13
Fortinet FortiSandbox 12
FortiSOAR PaaS 11
FortiSandbox PaaS 11
FortiSwitch 9
FortiSandbox Cloud 9
FortiDDoS-F 9
Fortinet FortiWLM 9
Fortinet FortiManager 9
Fortinet FortiClientWindows 9
Fortinet FortiTester 8
Fortinet FortiADC 7
1,116 results · Feed
-
High 8.8
An improper neutralization of special elements used in an OS Command vulnerability in FortiSandbox 3.2.0 through 3.2.2,…
-
Medium 6.0
A use of one-way hash with a predictable salt vulnerability in the password storing mechanism of FortiPortal 6.0.0 thro…
-
High 8.8
Instances of SQL Injection vulnerabilities in the checksum search and MTA-quarantine modules of FortiSandbox 3.2.0 thro…
-
Medium 6.5
A Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Fortinet FortiPortal 6.x before 6.0…
-
High 8.1
Improper limitation of a pathname to a restricted directory vulnerabilities in FortiSandbox 3.2.0 through 3.2.2, and 3.…
-
Medium 4.3
A buffer underwrite vulnerability in the firmware verification routine of FortiOS before 7.0.1 may allow an attacker lo…
-
Critical 9.9
Multiple improper neutralization of special elements used in an SQL command vulnerabilities in FortiPortal 6.0.0 throug…
-
Medium 5.4
An unrestricted file upload vulnerability in the web interface of FortiPortal 6.0.0 through 6.0.4, 5.3.0 through 5.3.5,…
-
Medium 5.3
An instance of small space of random values in the RPC API of FortiSandbox before 4.0.0 may allow an attacker in posses…
-
High 7.5
The combination of various cryptographic issues in the session management of FortiMail 6.4.0 through 6.4.4 and 6.2.0 th…
-
Medium 6.7
A buffer overflow vulnerability in FortiAnalyzer CLI 6.4.5 and below, 6.2.7 and below, 6.0.x and FortiManager CLI 6.4.5…
-
Medium 6.3
An instance of improper neutralization of special elements in the sniffer module of FortiSandbox before 3.2.2 may allow…
-
High 8.8
Multiple Path traversal vulnerabilities in the Webmail of FortiMail before 6.4.4 may allow a regular user to obtain una…
-
High 7.2
An improper neutralization of special elements used in an OS Command vulnerability in the administrative interface of F…
-
High 7.1CVE-2021-26088 Public exploit
An improper authentication vulnerability in FSSO Collector version 5.0.295 and below may allow an unauthenticated user …
-
Medium 5.3
A missing release of memory after its effective lifetime vulnerability in the Webmail of FortiMail 6.4.0 through 6.4.4 …
-
Medium 6.7
An improper symlink following in FortiClient for Mac 6.4.3 and below may allow an non-privileged user to execute arbitr…
-
Medium 4.4
Missing cryptographic steps in the Identity-Based Encryption service of FortiMail before 7.0.0 may allow an attacker wh…
-
Critical 9.8
Multiple improper neutralization of special elements of SQL commands vulnerabilities in FortiMail before 6.4.4 may allo…
-
High 8.8
Multiple instances of incorrect calculation of buffer size in the Webmail and Administrative interface of FortiMail bef…
-
High 7.8
An improper neutralization of special elements used in an OS Command vulnerability in FortiAP's console 6.4.1 through 6…
-
Medium 6.3
A concurrent execution using shared resource with improper synchronization ('race condition') in the command shell of F…
-
Medium 5.9
A missing cryptographic step in the Identity-Based Encryption service of FortiMail before 7.0.0 may allow an unauthenti…
-
High 7.5
A missing cryptographic step in the implementation of the hash digest algorithm in FortiMail 6.4.0 through 6.4.4, and 6…
-
Medium 4.0
Usage of hard-coded cryptographic keys to encrypt configuration files and debug logs in FortiAuthenticator versions bef…
-
High 7.8
An improper input validation in FortiAI v1.4.0 and earlier may allow an authenticated user to gain system shell access …
-
Medium 6.7
A stack-based buffer overflow vulnerability in FortiProxy physical appliance CLI 2.0.0 to 2.0.1, 1.2.0 to 1.2.9, 1.1.0 …
-
Medium 6.5
An improper following of a certificate's chain of trust vulnerability in FortiGate versions 6.4.0 to 6.4.4 may allow an…
-
Medium 4.3
Two authorization bypass through user-controlled key vulnerabilities in the Fortinet FortiPresence 2.1.0 administration…
-
High 7.6
An OS command injection vulnerability in FortiWeb's management interface 6.3.7 and below, 6.2.3 and below, 6.1.x, 6.0.x…
-
Medium 6.5
A missing release of memory after effective lifetime vulnerability in FortiSwitch 6.4.0 to 6.4.6, 6.2.0 to 6.2.6, 6.0.0…
-
Medium 6.3
A privilege escalation vulnerability in FortiNAC version below 8.8.2 may allow an admin user to escalate the privileges…
-
Medium 5.4
A Stack-based Buffer Overflow vulnerability in the HTTPD daemon of FortiOS 6.0.10 and below, 6.2.2 and below and FortiP…
-
Medium 4.3
A clear text storage of sensitive information into log file vulnerability in FortiADCManager 5.3.0 and below, 5.2.1 and…
-
Medium 4.3
An information disclosure vulnerability in Web Vulnerability Scan profile of Fortinet's FortiWeb version 6.2.x below 6.…
-
Medium 4.0
When traffic other than HTTP/S (eg: SSH traffic, etc...) traverses the FortiGate in version below 6.2.5 and below 6.4.2…
-
High 7.1
An improper access control vulnerability in FortiProxy SSL VPN portal 2.0.0, 1.2.9 and below versions may allow an auth…
-
Medium 4.7
An improper neutralization of input vulnerability in FortiGate version 6.2.x below 6.2.5 and 6.4.x below 6.4.1 may allo…
-
Unscored —
An improper neutralization of input during web page generation in FortiWeb GUI interface 6.3.0 through 6.3.7 and versio…
-
Unscored —
An insufficient session expiration vulnerability in FortiNet's FortiIsolator version 2.0.1 and below may allow an attac…