Known vulnerabilities in FortiOS 5.6.7 - page 2

Software: FortiOS
Version: 5.6.7
Software CPE: cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
Total vulnerabilities: 29
Public exploits: 2
Known exploited (KEV): 3
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting FortiOS version 5.6.7 FortiOS 5.6.7 is affected by 29 vulnerabilities: 3 high, 16 medium, 10 low Critical High Medium Low

Vulnerabilities (29)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU22855 - Use of Hard-coded Cryptographic Key
CVE-2019-6693
CWE-321 Low
No
Exploited
5.6.10, 6.0.7, 6.2.1 19.11.2019 SB2019111920
#VU50300 - Memory corruption
CVE-2018-13381
CWE-119 High
No
No
5.6.8, 6.0.5 04.06.2019 SB2019051712
SB2021020333
#VU18609 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-13379
CWE-22 High
Public exploit available
Exploited
5.6.8, 6.0.5, 6.2.0 27.05.2019 SB2019052703
SB2021060121
#VU18608 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-13380
CWE-79 Low
No
No
5.6.8, 6.0.5, 6.2.0 27.05.2019 SB2019052701
SB2021030421
#VU18607 - Improper Authorization
CVE-2018-13382
CWE-285 High
Public exploit available
Exploited
5.4.11, 5.6.9, 6.0.5, 6.2.0 27.05.2019 SB2019052702
SB2021060122
#VU18605 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-5586
CWE-79 Low
No
No
6.0.5, 6.2.0 27.05.2019 SB2019052701
#VU18025 - Integer overflow
CVE-2019-3857
CWE-190 Medium
No
No
5.6.11, 6.0.7, 6.2.1 19.03.2019 SB2019031904
SB2019041501
SB2019032002
and 20 more
#VU9504 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2017-14186
CWE-601 Low
No
No
5.6.8, 6.0.5, 6.2.0 01.12.2017 SB2017120107
#VU9503 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-14186
CWE-79 Low
No
No
5.6.8, 6.0.5, 6.2.0 29.11.2017 SB2017120107


Showing elements 21 - 40 out of 29