Vendor
Fortinet
1,116 known vulnerabilities.
Products
FortiOS 195
FortiManager 130
FortiProxy 109
FortiAnalyzer 108
FortiWeb 75
FortiManager Cloud 53
FortiSandbox 53
FortiMail 51
FortiAnalyzer Cloud 46
Fortinet FortiOS 46
FortiPAM 37
FortiADC 33
FortiClientWindows 32
Fortinet FortiWeb 30
FortiAuthenticator 30
FortiSIEM 26
FortiPortal 25
FortiNAC 23
FortiClientEMS 23
FortiVoice 21
Fortinet FortiPortal 19
FortiSwitchManager 19
FortiRecorder 16
FortiClientMac 16
Fortinet FortiMail 15
FortiSOAR 14
FortiWLM 14
FortiSOAR on-premise 13
FortiNDR 13
Fortinet FortiSandbox 12
FortiSOAR PaaS 11
FortiSandbox PaaS 11
FortiSwitch 9
FortiSandbox Cloud 9
FortiDDoS-F 9
Fortinet FortiWLM 9
Fortinet FortiManager 9
Fortinet FortiClientWindows 9
Fortinet FortiTester 8
Fortinet FortiADC 7
1,116 results · Feed
-
High 7.1
A reliance on cookies without validation and integrity checking vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1,…
-
Medium 4.2
A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiADC 8.0.…
-
Medium 6.9
A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, Forti…
-
Medium 6.3
An Out-of-bounds Write vulnerability [CWE-787] in FortiADC 8.0.0, 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2 all ver…
-
Medium 6.9
A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, Forti…
-
Low 1.7
An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS…
-
Medium 5.0
An Improper Isolation or Compartmentalization vulnerability [CWE-653] in Fortinet FortiSandbox 5.0.0 through 5.0.1, For…
-
Medium 4.8
A use of hard-coded credentials vulnerability in Fortinet FortiWeb 7.6.0, FortiWeb 7.4 all versions, FortiWeb 7.2 all v…
-
Low 3.8
A Cleartext Storage of Sensitive Information in Memory vulnerability [CWE-316] in Fortinet FortiPAM 1.6.0, FortiPAM 1.5…
-
Medium 4.9
An active debug code vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through…
-
Medium 5.2
A debug messages revealing unnecessary information vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiEx…
-
Medium 6.3
A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiExtender 7.6.0 …
-
Low 3.9
An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiADC 7.4.0, FortiADC 7.2 al…
-
High 7.1
A Heap-based Buffer Overflow vulnerability [CWE-122] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, …
-
Low 3.9
An improper neutralization of crlf sequences ('crlf injection') vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3…
-
High 7.7
An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] vulnerab…
-
Medium 6.7
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vu…
KEV Nov 18, 2025 -
High 7.1
An Exposed IOCTL with Insufficient Access Control vulnerability [CWE-782] vulnerability in Fortinet FortiClientWindows …
-
Critical 9.4
A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWe…
KEV Nov 14, 2025 -
Medium 4.2
A insertion of sensitive information into log file in Fortinet FortiDLP 12.0.0 through 12.0.5, 11.5.1, 11.4.6, 11.4.5 a…
-
Medium 5.1
An Exposure of Private Personal Information ('Privacy Violation') vulnerability [CWE-359] in Fortinet FortiDLP Agent's …
-
Medium 4.9
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in Fortinet Fo…
-
High 7.2
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in Fortinet Fo…
-
Low 2.6
A insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4 a…
-
Medium 6.8
An Improper Verification of Cryptographic Signature vulnerability [CWE-347] in FortiClient MacOS installer version 7.4.…
-
Medium 4.2
An improper authorization vulnerability [CWE-285] vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 …
-
Medium 5.5
An Improper Control of Generation of Code ('Code Injection') vulnerability [CWE-94] in FortiClientMac 7.4.0 through 7.4…
-
High 7.0
An insufficient session expiration vulnerability [CWE-613] and an incorrect authorization vulnerability [CWE-863] in Fo…
-
Medium 6.2
An improper authentication vulnerability [CWE-287] in Fortinet FortiAnalyzer version 7.6.0 through 7.6.3 and before 7.4…
-
Medium 6.2
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiADC version 7.4.…
-
Medium 6.0
An Uncontrolled Search Path Element vulnerability [CWE-427] in FortiClient Windows 7.4.0 through 7.4.3, 7.2.0 through 7…
-
Medium 4.8
An Improperly Implemented Security Check for Standard vulnerability [CWE-358] vulnerability in Fortinet FortiOS 7.6.0 t…
-
Medium 4.3
An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL VPN 7.6.0 through 7.6.2, 7.4.0 through 7.4.6,…
-
Medium 5.0
An improper check or handling of exceptional conditions vulnerability [CWE-703] in FortiOS version 7.4.0 through 7.4.3 …
-
Medium 4.2
A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail …
-
Medium 5.3
A concurrent execution using shared resource with improper synchronization ('Race Condition') vulnerability [CWE-362] i…
-
Medium 6.3
A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.7 and 7.0.0 through…
-
Medium 6.5
A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through 7…
-
Medium 4.5
An Improper Neutralization of Input During Web Page Generation vulnerability [CWE-79] vulnerability in Fortinet FortiOS…
-
Medium 6.8
An Improper Validation of Certificate with Host Mismatch vulnerability [CWE-297] in FortiProxy version 7.6.1 and below,…