Known vulnerabilities in FortiOS 6.0.1

Software: FortiOS
Version: 6.0.1
Software CPE: cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
Total vulnerabilities: 88
Public exploits: 9
Known exploited (KEV): 11
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting FortiOS version 6.0.1 FortiOS 6.0.1 is affected by 88 vulnerabilities: 3 critical, 9 high, 43 medium, 33 low Critical High Medium Low

Vulnerabilities (88)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118605 - Stack-based buffer overflow
CVE-2025-58413
CWE-121 Medium
No
No
7.4.9, 7.6.4 18.11.2025 SB2025111874
#VU117148 - Insertion of Sensitive Information Into Sent Data
CVE-2024-47569
CWE-201 Low
No
No
6.4.16, 7.0.16, 7.2.9, 7.4.5, 7.6.1 15.10.2025 SB2025101507
#VU113958 - Authentication Bypass Using an Alternate Path or Channel
CVE-2024-26009
CWE-288 High
No
No
6.2.17, 6.4.16 12.08.2025 SB2025081297
#VU107320 - NULL Pointer Dereference
CVE-2023-42786
CWE-476 Medium
No
No
7.2.6, 7.4.2 09.04.2025 SB2025040985
#VU107319 - NULL Pointer Dereference
CVE-2023-42785
CWE-476 Medium
No
No
7.2.6, 7.4.2 09.04.2025 SB2025040985
#VU100401 - Improper Authentication
CVE-2024-26011
CWE-287 Medium
No
No
7.0.15, 7.2.8, 7.4.4 12.11.2024 SB20241112152
SB20241112154
SB20241112155
and 3 more
#VU91764 - Stack-based buffer overflow
CVE-2024-23110
CWE-121 Low
No
No
6.2.16, 6.4.15, 7.0.14, 7.2.7, 7.4.3 11.06.2024 SB20240611279
#VU91760 - Stack-based buffer overflow
CVE-2024-26010
CWE-121 Medium
No
No
7.0.15, 7.2.8, 7.4.4 11.06.2024 SB20240611274
#VU89658 - Use of Externally-Controlled Format String
CVE-2023-45583
CWE-134 Low
No
No
7.2.6, 7.4.1 20.05.2024 SB2024052014
#VU89656 - Use of Externally-Controlled Format String
CVE-2023-36640
CWE-134 Low
No
No
7.2.6, 7.4.1 20.05.2024 SB2024052014
#VU88233 - Insufficiently Protected Credentials
CVE-2023-41677
CWE-522 Medium
No
No
6.2.16, 6.4.15, 7.0.13, 7.2.7, 7.4.2 09.04.2024 SB2024040954
#VU86278 - Out-of-bounds write
CVE-2024-21762
CWE-787 Critical
Public exploit available
Exploited
6.2.16, 6.4.15, 7.0.14, 7.2.7, 7.4.3 09.02.2024 SB2024020901
SB2024031338
#VU84439 - Use of Externally-Controlled Format String
CVE-2023-36639
CWE-134 Medium
No
No
6.2.16, 6.4.13, 7.0.12, 7.2.5, 7.4.1 14.12.2023 SB2023121476
SB2024031818
#VU83247 - NULL Pointer Dereference
CVE-2023-36641
CWE-476 Medium
No
No
7.0.13, 7.2.6, 7.4.1 17.11.2023 SB2023111732
SB2024031818
#VU83246 - Improper Validation of Integrity Check Value
CVE-2023-28002
CWE-354 Low
No
No
7.0.13, 7.2.4, 7.4.0 17.11.2023 SB2023111731
SB2024031818
#VU77959 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-33305
CWE-835 Low
No
No
7.0.11, 7.2.5, 7.4.0 05.07.2023 SB2023070504
SB2024031818
#VU77181 - Improper Certificate Validation
CVE-2023-29175
CWE-295 Medium
No
No
7.0.11, 7.2.1 13.06.2023 SB2023061316
SB2024031818
#VU77180 - Out-of-bounds write
CVE-2023-22639
CWE-787 Low
No
No
6.4.13, 7.0.11, 7.2.4 13.06.2023 SB2023061315
SB2024031818
#VU77179 - Access of Uninitialized Pointer
CVE-2023-29178
CWE-824 Low
No
No
7.0.12, 7.2.5 13.06.2023 SB2023061314
SB2024031818
#VU77177 - Use of Externally-Controlled Format String
CVE-2023-29181
CWE-134 Medium
No
No
6.2.15, 6.4.13, 7.0.12, 7.2.5 13.06.2023 SB2023061312
SB2024031818


Showing elements 1 - 20 out of 88