Known vulnerabilities in FortiADC

Software: FortiADC
Software CPE: cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*
Total vulnerabilities: 43
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiADC FortiADC is affected by 43 known vulnerabilities: 2 high, 15 medium, 26 low Critical High Medium Low

Vulnerabilities (43)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118608 - Exposure of sensitive information to an unauthorized actor
CVE-2025-54971
CWE-200 Low
No
No
7.4.3 18.11.2025 SB2025111877
#VU118599 - Out-of-bounds write
CVE-2025-48839
CWE-787 Low
No
No
7.4.8, 7.6.3, 8.0.1 18.11.2025 SB2025111868
#VU118594 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-58412
CWE-79 Low
No
No
7.6.4, 8.0.1 18.11.2025 SB2025111863
#VU117647 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-37933
CWE-79 Medium
No
No
7.1.4, 7.2.2, 7.4.1 24.10.2025 SB2025102465
#VU117135 - Exposure of sensitive information to an unauthorized actor
CVE-2025-59921
CWE-200 Low
No
No
7.1.5, 7.2.4, 7.4.1 14.10.2025 SB20251014107
#VU113975 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-49813
CWE-78 Low
No
No
7.1.2, 7.2.1 13.08.2025 SB2025081301
#VU111053 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-31104
CWE-78 Low
No
No
7.1.5, 7.2.8, 7.4.7, 7.6.2 11.06.2025 SB2025061118
#VU104034 - Improper input validation
CVE-2025-26466
CWE-20 Medium
Available
No
7.6.2 18.02.2025 SB2025021815
SB2025021830
SB2025021840
and 25 more
#VU97002 - Improperly Implemented Security Check for Standard
CVE-2024-36511
CWE-358 Low
No
No
7.4.5 10.09.2024 SB2024091082
#VU94013 - Improper Certificate Validation
CVE-2023-50178
CWE-295 Medium
No
No
7.2.4, 7.4.1 09.07.2024 SB20240709123
#VU94001 - Improper Access Control
CVE-2023-50181
CWE-284 Low
No
No
7.2.5, 7.4.2 09.07.2024 SB20240709108
#VU94000 - Improper Certificate Validation
CVE-2023-50179
CWE-295 Medium
No
No
7.4.1 09.07.2024 SB20240709107
#VU93513 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-6387
CWE-362 High
Available
No
7.2.7, 7.4.5 01.07.2024 SB2024070144
SB2024070145
SB2024070152
and 89 more
#VU89567 - Exposure of sensitive information to an unauthorized actor
CVE-2023-50180
CWE-200 Low
No
No
7.2.4, 7.4.2 15.05.2024 SB2024051538
#VU84528 - Improper Authorization
CVE-2023-41673
CWE-285 Low
No
No
7.2.3, 7.4.1 18.12.2023 SB2023121848
#VU83296 - Memory corruption
CVE-2023-29177
CWE-119 Low
No
No
7.1.3, 7.2.1 20.11.2023 SB2023112036
#VU83294 - Overly Permissive Cross-domain Whitelist
CVE-2023-25603
CWE-942 Medium
No
No
7.1.2, 7.2.0 20.11.2023 SB2023112035
#VU83286 - Improper Access Control
CVE-2023-26205
CWE-284 High
No
No
7.1.3, 7.2.0 20.11.2023 SB2023112037
#VU81962 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-25607
CWE-78 Low
No
No
7.0.4, 7.1.1 12.10.2023 SB2023101254
#VU80870 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-35849
CWE-78 Low
No
No
6.2.6, 7.0.4, 7.1.2 18.09.2023 SB2023091834


Showing elements 1 - 20 out of 43