Vendor
Fortinet
1,116 known vulnerabilities.
Products
FortiOS 195
FortiManager 130
FortiProxy 109
FortiAnalyzer 108
FortiWeb 75
FortiManager Cloud 53
FortiSandbox 53
FortiMail 51
FortiAnalyzer Cloud 46
Fortinet FortiOS 46
FortiPAM 37
FortiADC 33
FortiClientWindows 32
Fortinet FortiWeb 30
FortiAuthenticator 30
FortiSIEM 26
FortiPortal 25
FortiNAC 23
FortiClientEMS 23
FortiVoice 21
Fortinet FortiPortal 19
FortiSwitchManager 19
FortiRecorder 16
FortiClientMac 16
Fortinet FortiMail 15
FortiSOAR 14
FortiWLM 14
FortiSOAR on-premise 13
FortiNDR 13
Fortinet FortiSandbox 12
FortiSOAR PaaS 11
FortiSandbox PaaS 11
FortiSwitch 9
FortiSandbox Cloud 9
FortiDDoS-F 9
Fortinet FortiWLM 9
Fortinet FortiManager 9
Fortinet FortiClientWindows 9
Fortinet FortiTester 8
Fortinet FortiADC 7
1,116 results · Feed
-
Unscored —
A format string vulnerability in FortiWeb 6.3.0 through 6.3.5 may allow an authenticated, remote attacker to read the c…
-
Unscored —
A stack-based buffer overflow vulnerability in FortiWeb 6.3.0 through 6.3.5 and version before 6.2.4 may allow an unaut…
-
Medium 5.3
A cleartext storage of sensitive information vulnerability in FortiOS command line interface in versions 6.2.4 and earl…
-
Medium 4.9
A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet may allow att…
-
Unscored —
An improper neutralization of input vulnerability in FortiTester before 3.9.0 may allow a remote authenticated attacker…
-
Unscored —
An improper neutralization of input vulnerability in FortiAnalyzer before 6.4.1 and 6.2.5 may allow a remote authentica…
-
Unscored —
An insufficient logging vulnerability in FortiGate before 6.4.1 may allow the traffic from an unauthenticated attacker …
-
Unscored —
An improper neutralization of input vulnerability in FortiNAC before 8.7.2 may allow a remote authenticated attacker to…
-
Medium 6.5
A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept …
KEV Nov 3, 2021 -
Unscored —
An insufficient session expiration vulnerability in FortiDeceptor 3.0.0 and below allows an attacker to reuse the unexp…
-
Unscored —
An improper neutralization of input vulnerability in FortiWLC 8.5.1 allows a remote authenticated attacker to perform a…
-
Medium 5.3
A cleartext storage in a file or on disk (CWE-313) vulnerability in FortiOS SSL VPN 6.2.0 through 6.2.2, 6.0.9 and earl…
-
Medium 6.3
An Insecure Temporary File vulnerability in FortiClient for Windows 6.2.1 and below may allow a local user to gain elev…
-
Unscored —
An improper authentication vulnerability in FortiMail 5.4.10, 6.0.7, 6.2.2 and earlier and FortiVoiceEntreprise 6.0.0 a…
-
Unscored —
A system command injection vulnerability in the FortiAP-S/W2 6.2.1, 6.2.0, 6.0.5 and below, FortiAP 6.0.5 and below and…
-
Unscored —
An Insufficient Verification of Data Authenticity vulnerability in FortiManager 6.2.1, 6.2.0, 6.0.6 and below may allow…
-
Unscored —
An improper input validation vulnerability in FortiOS 6.2.1, 6.2.0, 6.0.8 and below until 5.4.0 under admin webUI may a…
-
High 7.5
A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via netwo…
-
High 7.1
A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via netwo…
-
Unscored —
An improper neutralization of input vulnerability in Fortinet FortiADC 5.3.3 and earlier may allow an attacker to execu…
-
Unscored —
An information exposure vulnerability in Fortinet FortiWeb 6.2.0 CLI and earlier may allow an authenticated user to vie…
-
Unscored —
A Cross-Site Request Forgery (CSRF) vulnerability in the user interface of Fortinet FortiSIEM 5.2.5 could allow a remot…
-
Unscored —CVE-2019-17658 Public exploit
An unquoted service path vulnerability in the FortiClient FortiTray component of FortiClientWindows v6.2.2 and prior al…
-
Unscored —
An improper neutralization of input vulnerability in the URL Description in Fortinet FortiIsolator version 1.2.2 allows…
-
Unscored —
An Improper Neutralization of Input vulnerability in the Anomaly Detection Parameter Name in Fortinet FortiWeb 6.0.5, 6…
-
Unscored —
A privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow a user with low privilege to ov…
-
Unscored —
A Denial of service (DoS) vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege t…
-
Unscored —
A stack buffer overflow vulnerability in FortiClient for Linux 6.2.1 and below may allow a user with low privilege to c…
-
Unscored —
A privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to r…
-
Unscored —
An Improper Neutralization of Input vulnerability in the description and title parameters of a Device Maintenance Sched…
-
Unscored —
A hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5 and below may allow atta…
-
Unscored —
An improper neutralization of input during web page generation in FortiAuthenticator WEB UI 6.0.0 may allow an unauthen…
-
Unscored —
An Improper Input Validation vulnerability in the SSL VPN portal of FortiOS versions 6.2.1 and below, and 6.0.6 and bel…
-
Medium 6.5
Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attack…
KEV Jun 25, 2025 -
Unscored —
An Improper Neutralization of Special Elements used in a Command vulnerability in one of FortiClient for Mac OS root pr…
-
Unscored —
Use of a hardcoded cryptographic key in the FortiGuard services communication protocol may allow a Man in the middle wi…
-
Unscored —
A clear text storage of sensitive information vulnerability in FortiClient for Mac may allow a local attacker to read s…
-
Unscored —
An OS command injection vulnerability in FortiExtender 4.1.0 to 4.1.1, 4.0.0 and below under CLI admin console may allo…
-
Unscored —
An Insufficient Entropy in PRNG vulnerability in Fortinet FortiOS 6.2.1, 6.2.0, 6.0.8 and below for device not enable h…
-
Unscored —
The URL part of the report message is not encoded in Fortinet FortiWeb 6.0.2 and below which may allow an attacker to e…