fortinet

1,122 tracked vulnerabilities.

CVE-2023-40717 MEDIUM
FortiTester <7.2.3 - Info Disclosure
Sep 13, 2023
CVSS 5.3
EPSS 0.00
CVE-2023-40715 MEDIUM
FortiTester <7.2.3 - Info Disclosure
Sep 13, 2023
CVSS 5.5
EPSS 0.00
CVE-2023-36642 MEDIUM
FortiTester <7.2.3 - Command Injection
Sep 13, 2023
CVSS 6.7
EPSS 0.00
CVE-2023-36638 MEDIUM
FortiAnalyzer 6.0.0-6.4.11 & FortiManager 6.4.0-6.4.11 - Privilege Escalation via Stolen GUI Session ID
Sep 13, 2023
CVSS 4.3
EPSS 0.00
CVE-2023-36634 HIGH
FortiAP-U <7.0.0, <6.2.5, <=6.0, <=5.4 - Command Injection
Sep 13, 2023
CVSS 7.1
EPSS 0.00
CVE-2023-36551 MEDIUM
Fortinet FortiSIEM <6.7.5 - Info Disclosure
Sep 13, 2023
CVSS 4.3
EPSS 0.01
CVE-2023-34984 HIGH
FortiWeb 6.3.6-6.3.23, 6.4.0-6.4.3, 7.0.0-7.0.6, 7.2.0-7.2.1 - Remote Code Execution via Crafted HTTP Requests
Sep 13, 2023
CVSS 7.5
EPSS 0.01
CVE-2023-29183 HIGH
FortiProxy/FortiOS <7.2.4/<7.0.11/<6.4.12/<6.2.14 - XSS
Sep 13, 2023
CVSS 8.0
EPSS 0.01
CVE-2023-27998 MEDIUM
FortiPresence 1.0-1.2.1 - Unauthenticated Sensitive Information Exposure via Missing Custom Error Page
Sep 13, 2023
CVSS 5.3
EPSS 0.00
CVE-2023-25608 MEDIUM
FortiAP - Unfiltered Special Elements
Sep 13, 2023
CVSS 5.5
EPSS 0.00
CVE-2023-36635 HIGH
Fortinet FortiSwitchManager <7.2.2, <7.0.1 - Privilege Escalation
Sep 07, 2023
CVSS 7.1
EPSS 0.00
CVE-2023-29182 MEDIUM
Fortinet FortiOS <7.0.3 - Buffer Overflow
Aug 17, 2023
CVSS 6.4
EPSS 0.00
CVE-2023-33308 CRITICAL
Fortinet FortiOS <7.0.10,7.2.3 - Buffer Overflow
Jul 26, 2023
CVSS 9.8
EPSS 0.08
CVE-2023-28001 MEDIUM
FortiOS 7.0.0-7.0.12 and 7.2.0-7.2.4 - Insufficient Session Expiration via REST API
Jul 11, 2023
CVSS 4.1
EPSS 0.00
CVE-2023-25606 MEDIUM
FortiAnalyzer and FortiManager 6.4.0-6.4.11, 7.0.0-7.0.5, 7.2.0-7.2.1 - Authenticated Path Traversal
Jul 11, 2023
CVSS 6.5
EPSS 0.00
CVE-2023-23777 HIGH
FortiWeb <=7.0.1, 6.4, <=6.3.18 - Authenticated OS Command Injection via CLI Backup
Jul 11, 2023
CVSS 7.2
EPSS 0.00
CVE-2023-33299 CRITICAL
Fortinet FortiNAC <7.2.1, <9.4.3, <9.2.8, <=8.x - Use After Free
Jun 23, 2023
CVSS 9.8
EPSS 0.11
CVE-2023-33307 MEDIUM
Fortinet FortiOS <7.2.5-7.0.11 - DoS
Jun 16, 2023
CVSS 6.5
EPSS 0.00
CVE-2023-33306 MEDIUM
Fortinet FortiOS <7.2.5, <7.0.11, <6.4.13 - DoS
Jun 16, 2023
CVSS 6.5
EPSS 0.00
CVE-2023-33305 MEDIUM
Fortinet FortiOS <7.2.4 & FortiProxy <7.2.3 - DoS
Jun 13, 2023
CVSS 4.9
EPSS 0.00
CVE-2023-29178 MEDIUM
Fortinet FortiProxy <7.2.3, FortiOS <7.0.11 - Use After Free
Jun 13, 2023
CVSS 4.3
EPSS 0.00
CVE-2023-29175 MEDIUM
FortiOS and FortiProxy - Man-in-the-Middle via Improper FortiGuard Certificate Validation
Jun 13, 2023
CVSS 4.8
EPSS 0.00
CVE-2023-28000 MEDIUM
FortiADC 6.0.0-6.0.3, 6.1.0-6.1.x, 6.2.0-6.2.4, 7.0.0-7.0.3, 7.1.0 - OS Command Injection via Diagnose System DF CLI
Jun 13, 2023
CVSS 6.7
EPSS 0.00
CVE-2023-27997 CRITICAL KEV
FortiOS/FortiProxy SSL-VPN Heap-based Buffer Overflow
Jun 13, 2023
CVSS 9.8
EPSS 0.92
CVE-2023-26210 HIGH
FortiADC 5.2.0-5.2.7 - Authenticated OS Command Injection via CLI Requests
Jun 13, 2023
CVSS 7.8
EPSS 0.00