Known vulnerabilities in FortiOS 5.6.7
Vendor:
Fortinet, Inc
Software:
FortiOS
Version:
5.6.7
Software CPE:
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
Website:
https://www.fortinet.com/
Total vulnerabilities:
29
Public exploits:
2
Known exploited (KEV):
3
Highest CVSSv4 Score:
8.8
Vulnerabilities by Severity
7.6.7
7.4.12
7.4.10
7.0.19
7.2.13
7.4.11
7.6.6
6.4.17
7.6.5
7.0.18
7.4.9
7.6.4
7.2.12
7.4.8
7.6.3
6.2.17
6.4.16
7.2.11
7.6.2
7.4.7
7.0.17
7.4.6
7.6.1
7.6.0
7.4.5
7.0.16
7.2.10
7.2.9
7.4.4
7.0.15
7.2.8
6.0.18
7.4.3
6.4.15
7.0.14
6.2.16
7.2.7
7.4.2
7.0.13
7.4.1
7.2.6
6.4.14
7.0.12
6.0.17
6.2.15
7.2.5
6.2.14
6.4.13
7.0.11
7.4.0
7.0.10
6.2.13
6.4.12
7.2.4
6.0.16
7.0.9
7.2.3
6.2.12
6.4.11
7.0.8
7.0.7
7.2.2
6.4.10
7.2.1
6.0.15
6.2.11
7.0.6
6.4.9
7.2.0
7.0.5
7.0.4
6.0.14
6.4.8
7.0.3
5.6.14
6.2.10
7.0.2
6.2.9
6.2.8
6.4.7
6.0.13
7.0.1
7.0.0
6.4.6
6.4.5
6.4.4
6.4.3
5.4.13
6.0.12
6.0.8
6.2.7
6.2.6
6.4.2
6.0.11
5.6.13
5.6.12
6.2.5
4.3.17
6.0.9
6.4.0
6.4.1
6.0.10
6.2.4
6.2.3
6.0.7
5.6.11
5.6.10
5.4.12
5.2.15
5.2.14
6.2.2
6.2.1
6.0.6
6.2.0
6.0.5
6.0.4
5.6.9
5.6.8
5.6.7
5.6.6
5.6.5
5.4.11
5.4.10
5.0.14
6.0.3
6.0.2
5.6.4
6.0.1
6.0.0
5.4.9
5.4.8
5.4.7
5.2.13
5.6.3
5.4.6
5.2.12
5.6.2
5.6.1
5.6.0
5.4.5
5.4.4
5.4.3
5.2.11
5.4.2
5.4.1
5.2.4
5.2.10
5.2.9
5.2.8
5.2.7
5.2.6
5.4
4.3.16
5.2.5
4.3.13
4.3.14
4.3.15
4.3.12
4.3.10
5.0
3.0
2.36
2.5 0mr4
3.0 beta
2.80
2.50 mr5
2.50
3.0 mr1
3 beta
2.8 mr10
4.3.9
4.3.8
4.3.7
4.3.6
4.3.5
4.3.4
4.3.3
4.3.2
4.3.1
4.3.0
4.2.13
4.2.12
4.2.11
4.2.10
4.2.9
4.2.8
4.2.7
4.2.6
4.2.5
4.2.4
4.2.3
4.2.2
4.2.1
4.2.0
4.1.11
4.1.10
4.1.9
4.1.8
4.1.7
4.1.6
4.1.5
4.1.4
4.1.3
4.1.2
4.1.1
4.1.0
5.4.0
5.2.3
5.2.2
5.2.1
5.2.0
5.0.13
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
5.0.0
Vulnerabilities (29)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU77959 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2023-33305 |
CWE-835 | Low | 7.0.11, 7.2.5, 7.4.0 | 05.07.2023 |
SB2023070504 SB2024031818 |
||
| #VU77177 - Use of Externally-Controlled Format String CVE-2023-29181 |
CWE-134 | Medium | 6.2.15, 6.4.13, 7.0.12, 7.2.5 | 13.06.2023 |
SB2023061312 SB2024031818 |
||
| #VU64051 - Improper Certificate Validation CVE-2022-22305 |
CWE-295 | Medium | 6.4.0, 7.0.0 | 08.06.2022 |
SB2022060801 |
||
| #VU58630 - Improper Access Control CVE-2021-26110 |
CWE-284 | Low | 6.0.13, 6.2.10, 6.4.7, 7.0.1 | 07.12.2021 |
SB2021120717 |
||
| #VU58629 - Cross-Site Request Forgery (CSRF) CVE-2021-26103 |
CWE-352 | Medium | 6.2.10, 6.4.7, 7.0.1 | 07.12.2021 |
SB2021120716 |
||
| #VU58628 - Use of Hard-coded Cryptographic Key CVE-2021-26108 |
CWE-321 | Medium | 5.6.14, 6.0.13, 6.2.10, 6.4.6 | 07.12.2021 |
SB2021120714 |
||
| #VU56381 - Improper Access Control CVE-2021-32600 |
CWE-284 | Low | 6.4.7, 7.0.1 | 07.09.2021 |
SB2021090715 |
||
| #VU53718 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-26092 |
CWE-79 | Medium | 6.0.13, 6.2.8, 6.4.6 | 01.06.2021 |
SB2021060124 |
||
| #VU47186 - Stack-based buffer overflow CVE-2020-12820 |
CWE-121 | Medium | 5.6.13, 6.0.11 | 30.09.2020 |
SB2020093081 |
||
| #VU47185 - Heap-based Buffer Overflow CVE-2020-12819 |
CWE-122 | Medium | 5.6.13, 6.0.11, 6.2.5, 6.4.2 | 30.09.2020 |
SB2020093081 |
||
| #VU46818 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-15706 |
CWE-79 | Low | 5.6.13, 6.0.9, 6.2.2 | 18.09.2020 |
SB2020091804 SB2021050508 |
||
| #VU23072 - Improper input validation CVE-2019-15705 |
CWE-20 | Medium | 6.0.7, 6.2.2 | 28.11.2019 |
SB2019112805 |
||
| #VU18254 - Out-of-bounds write CVE-2019-3863 |
CWE-787 | Medium | 5.6.11, 6.0.7, 6.2.1 | 15.04.2019 |
SB2019031904 SB2019041501 SB2019032002 and 20 more |
||
| #VU18253 - Out-of-bounds read CVE-2019-3862 |
CWE-125 | Medium | 5.6.11, 6.0.7, 6.2.1 | 15.04.2019 |
SB2019031904 SB2019041501 SB2019032002 and 16 more |
||
| #VU18252 - Out-of-bounds read CVE-2019-3861 |
CWE-125 | Low | 5.6.11, 6.0.7, 6.2.1 | 15.04.2019 |
SB2019031904 SB2019041501 SB2019032002 and 12 more |
||
| #VU18028 - Out-of-bounds read CVE-2019-3858 |
CWE-125 | Medium | 5.6.11, 6.0.7, 6.2.1 | 20.03.2019 |
SB2019031904 SB2019041501 SB2019032002 and 12 more |
||
| #VU18027 - Out-of-bounds read CVE-2019-3859 |
CWE-125 | Medium | 5.6.11, 6.0.7, 6.2.1 | 20.03.2019 |
SB2019031904 SB2019041501 SB2019032002 and 15 more |
||
| #VU18026 - Out-of-bounds read CVE-2019-3860 |
CWE-125 | Medium | 5.6.11, 6.0.7, 6.2.1 | 20.03.2019 |
SB2019031904 SB2019041501 SB2019032002 and 13 more |
||
| #VU18024 - Integer overflow CVE-2019-3855 |
CWE-190 | Medium | 5.6.11, 6.0.7, 6.2.1 | 19.03.2019 |
SB2019031904 SB2019041501 SB2019032002 and 22 more |
||
| #VU18023 - Integer overflow CVE-2019-3856 |
CWE-190 | Medium | 5.6.11, 6.0.7, 6.2.1 | 19.03.2019 |
SB2019031904 SB2019041501 SB2019032002 and 20 more |
Showing elements 1 - 20 out of 29