Known vulnerabilities in FortiOS 6.0.1
Vendor:
Fortinet, Inc
Software:
FortiOS
Version:
6.0.1
Software CPE:
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
Website:
https://www.fortinet.com/
Total vulnerabilities:
88
Public exploits:
9
Known exploited (KEV):
11
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
7.6.7
7.4.12
7.4.10
7.0.19
7.2.13
7.4.11
7.6.6
6.4.17
7.6.5
7.0.18
7.4.9
7.6.4
7.2.12
7.4.8
7.6.3
6.2.17
6.4.16
7.2.11
7.6.2
7.4.7
7.0.17
7.4.6
7.6.1
7.6.0
7.4.5
7.0.16
7.2.10
7.2.9
7.4.4
7.0.15
7.2.8
6.0.18
7.4.3
6.4.15
7.0.14
6.2.16
7.2.7
7.4.2
7.0.13
7.4.1
7.2.6
6.4.14
7.0.12
6.0.17
6.2.15
7.2.5
6.2.14
6.4.13
7.0.11
7.4.0
7.0.10
6.2.13
6.4.12
7.2.4
6.0.16
7.0.9
7.2.3
6.2.12
6.4.11
7.0.8
7.0.7
7.2.2
6.4.10
7.2.1
6.0.15
6.2.11
7.0.6
6.4.9
7.2.0
7.0.5
7.0.4
6.0.14
6.4.8
7.0.3
5.6.14
6.2.10
7.0.2
6.2.9
6.2.8
6.4.7
6.0.13
7.0.1
7.0.0
6.4.6
6.4.5
6.4.4
6.4.3
5.4.13
6.0.12
6.0.8
6.2.7
6.2.6
6.4.2
6.0.11
5.6.13
5.6.12
6.2.5
4.3.17
6.0.9
6.4.0
6.4.1
6.0.10
6.2.4
6.2.3
6.0.7
5.6.11
5.6.10
5.4.12
5.2.15
5.2.14
6.2.2
6.2.1
6.0.6
6.2.0
6.0.5
6.0.4
5.6.9
5.6.8
5.6.7
5.6.6
5.6.5
5.4.11
5.4.10
5.0.14
6.0.3
6.0.2
5.6.4
6.0.1
6.0.0
5.4.9
5.4.8
5.4.7
5.2.13
5.6.3
5.4.6
5.2.12
5.6.2
5.6.1
5.6.0
5.4.5
5.4.4
5.4.3
5.2.11
5.4.2
5.4.1
5.2.4
5.2.10
5.2.9
5.2.8
5.2.7
5.2.6
5.4
4.3.16
5.2.5
4.3.13
4.3.14
4.3.15
4.3.12
4.3.10
5.0
3.0
2.36
2.5 0mr4
3.0 beta
2.80
2.50 mr5
2.50
3.0 mr1
3 beta
2.8 mr10
4.3.9
4.3.8
4.3.7
4.3.6
4.3.5
4.3.4
4.3.3
4.3.2
4.3.1
4.3.0
4.2.13
4.2.12
4.2.11
4.2.10
4.2.9
4.2.8
4.2.7
4.2.6
4.2.5
4.2.4
4.2.3
4.2.2
4.2.1
4.2.0
4.1.11
4.1.10
4.1.9
4.1.8
4.1.7
4.1.6
4.1.5
4.1.4
4.1.3
4.1.2
4.1.1
4.1.0
5.4.0
5.2.3
5.2.2
5.2.1
5.2.0
5.0.13
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
5.0.0
Vulnerabilities (88)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU118605 - Stack-based buffer overflow CVE-2025-58413 |
CWE-121 | Medium | 7.4.9, 7.6.4 | 18.11.2025 |
SB2025111874 |
||
| #VU117148 - Insertion of Sensitive Information Into Sent Data CVE-2024-47569 |
CWE-201 | Low | 6.4.16, 7.0.16, 7.2.9, 7.4.5, 7.6.1 | 15.10.2025 |
SB2025101507 |
||
| #VU113958 - Authentication Bypass Using an Alternate Path or Channel CVE-2024-26009 |
CWE-288 | High | 6.2.17, 6.4.16 | 12.08.2025 |
SB2025081297 |
||
| #VU107320 - NULL Pointer Dereference CVE-2023-42786 |
CWE-476 | Medium | 7.2.6, 7.4.2 | 09.04.2025 |
SB2025040985 |
||
| #VU107319 - NULL Pointer Dereference CVE-2023-42785 |
CWE-476 | Medium | 7.2.6, 7.4.2 | 09.04.2025 |
SB2025040985 |
||
| #VU100401 - Improper Authentication CVE-2024-26011 |
CWE-287 | Medium | 7.0.15, 7.2.8, 7.4.4 | 12.11.2024 |
SB20241112152 SB20241112154 SB20241112155 and 3 more |
||
| #VU91764 - Stack-based buffer overflow CVE-2024-23110 |
CWE-121 | Low | 6.2.16, 6.4.15, 7.0.14, 7.2.7, 7.4.3 | 11.06.2024 |
SB20240611279 |
||
| #VU91760 - Stack-based buffer overflow CVE-2024-26010 |
CWE-121 | Medium | 7.0.15, 7.2.8, 7.4.4 | 11.06.2024 |
SB20240611274 |
||
| #VU89658 - Use of Externally-Controlled Format String CVE-2023-45583 |
CWE-134 | Low | 7.2.6, 7.4.1 | 20.05.2024 |
SB2024052014 |
||
| #VU89656 - Use of Externally-Controlled Format String CVE-2023-36640 |
CWE-134 | Low | 7.2.6, 7.4.1 | 20.05.2024 |
SB2024052014 |
||
| #VU88233 - Insufficiently Protected Credentials CVE-2023-41677 |
CWE-522 | Medium | 6.2.16, 6.4.15, 7.0.13, 7.2.7, 7.4.2 | 09.04.2024 |
SB2024040954 |
||
| #VU86278 - Out-of-bounds write CVE-2024-21762 |
CWE-787 | Critical | 6.2.16, 6.4.15, 7.0.14, 7.2.7, 7.4.3 | 09.02.2024 |
SB2024020901 SB2024031338 |
||
| #VU84439 - Use of Externally-Controlled Format String CVE-2023-36639 |
CWE-134 | Medium | 6.2.16, 6.4.13, 7.0.12, 7.2.5, 7.4.1 | 14.12.2023 |
SB2023121476 SB2024031818 |
||
| #VU83247 - NULL Pointer Dereference CVE-2023-36641 |
CWE-476 | Medium | 7.0.13, 7.2.6, 7.4.1 | 17.11.2023 |
SB2023111732 SB2024031818 |
||
| #VU83246 - Improper Validation of Integrity Check Value CVE-2023-28002 |
CWE-354 | Low | 7.0.13, 7.2.4, 7.4.0 | 17.11.2023 |
SB2023111731 SB2024031818 |
||
| #VU77959 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2023-33305 |
CWE-835 | Low | 7.0.11, 7.2.5, 7.4.0 | 05.07.2023 |
SB2023070504 SB2024031818 |
||
| #VU77181 - Improper Certificate Validation CVE-2023-29175 |
CWE-295 | Medium | 7.0.11, 7.2.1 | 13.06.2023 |
SB2023061316 SB2024031818 |
||
| #VU77180 - Out-of-bounds write CVE-2023-22639 |
CWE-787 | Low | 6.4.13, 7.0.11, 7.2.4 | 13.06.2023 |
SB2023061315 SB2024031818 |
||
| #VU77179 - Access of Uninitialized Pointer CVE-2023-29178 |
CWE-824 | Low | 7.0.12, 7.2.5 | 13.06.2023 |
SB2023061314 SB2024031818 |
||
| #VU77177 - Use of Externally-Controlled Format String CVE-2023-29181 |
CWE-134 | Medium | 6.2.15, 6.4.13, 7.0.12, 7.2.5 | 13.06.2023 |
SB2023061312 SB2024031818 |
Showing elements 1 - 20 out of 88