Known vulnerabilities in FortiOS 6.0.1 - page 2

Software: FortiOS
Version: 6.0.1
Software CPE: cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
Total vulnerabilities: 88
Public exploits: 9
Known exploited (KEV): 11
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting FortiOS version 6.0.1 FortiOS 6.0.1 is affected by 88 vulnerabilities: 3 critical, 9 high, 43 medium, 33 low Critical High Medium Low

Vulnerabilities (88)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77178 - NULL Pointer Dereference
CVE-2023-29180
CWE-476 Medium
No
No
6.0.17, 6.2.15, 6.4.13, 7.2.5 13.06.2023 SB2023061312
SB2024031818
#VU77175 - Heap-based Buffer Overflow
CVE-2023-27997
CWE-122 Critical
Public exploit available
Exploited
6.0.17, 6.2.14, 6.2.15, 6.4.13, 7.0.12, 7.2.5 13.06.2023 SB2023061310
SB2024031818
#VU75734 - Out-of-bounds write
CVE-2023-22640
CWE-787 High
No
No
6.2.14, 6.4.12, 7.0.11, 7.2.4 04.05.2023 SB2023050443
SB2024031818
#VU74852 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-22641
CWE-601 Low
No
No
6.4.13, 7.0.10, 7.2.4 11.04.2023 SB2023041139
SB2024031818
#VU73200 - Buffer Underwrite ('Buffer Underflow')
CVE-2023-25610
CWE-124 High
Public exploit available
No
6.2.13, 6.4.12, 7.0.10, 7.2.4 09.03.2023 SB2023030926
SB2024031818
#VU73199 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-41328
CWE-22 High
No
Exploited
6.4.12, 7.0.10, 7.2.4 09.03.2023 SB2023030925
SB2024031818
#VU72351 - Cleartext Storage of Sensitive Information
CVE-2022-22302
CWE-312 Low
No
No
6.0.14, 6.2.10, 6.4.2 17.02.2023 SB2023021715
#VU72348 - Improper Privilege Management
CVE-2022-38378
CWE-269 Low
No
No
7.0.8, 7.2.1 17.02.2023 SB2023021707
SB2023021711
#VU72347 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2022-42472
CWE-113 Low
No
No
7.0.9, 7.2.3 17.02.2023 SB2023021709
SB2023021711
#VU72346 - Improper Verification of Cryptographic Signature
CVE-2021-43074
CWE-347 Low
No
No
6.4.9, 7.0.7 17.02.2023 SB2023021703
SB2023021704
SB2023021705
and 1 more
#VU72345 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-41335
CWE-22 Medium
No
No
7.0.9, 7.2.3 17.02.2023 SB2023021709
SB2023021711
SB2023021712
#VU72344 - Improper Certificate Validation
CVE-2022-39948
CWE-295 Medium
No
No
7.0.8, 7.2.4 17.02.2023 SB2023021710
SB2023021713
SB2024031818
#VU68929 - Insufficient Verification of Data Authenticity
CVE-2022-26122
CWE-345 Medium
No
No
7.0.8, 7.2.2 02.11.2022 SB2022110231
#VU68100 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-44171
CWE-78 Low
No
No
6.0.15, 6.2.11, 6.4.9, 7.0.7 10.10.2022 SB2022101025
#VU67033 - Missing Required Cryptographic Step
CVE-2022-29053
CWE-325 Low
No
No
7.0.6, 7.2.1 06.09.2022 SB2022090657
#VU67032 - Improper Verification of Source of a Communication Channel
CVE-2022-27491
CWE-940 Medium
No
No
6.2.11, 6.4.9, 7.0.6, 7.2.1 06.09.2022 SB2022090655
#VU65981 - Use of Externally-Controlled Format String
CVE-2022-22299
CWE-134 Low
No
No
6.0.15, 6.2.11, 6.4.9, 7.0.4 02.08.2022 SB2022080233
SB2022080234
SB2022080235
and 1 more
#VU64934 - Memory corruption
CVE-2021-43072
CWE-119 Low
No
No
6.2.11, 6.4.9, 7.0.6 05.07.2022 SB2022070525
SB2022070526
SB2022070527
and 1 more
#VU64930 - Integer overflow
CVE-2021-42755
CWE-190 Medium
No
No
6.4.9, 7.0.3 05.07.2022 SB2022070514
SB2022070515
SB2022070516
and 2 more
#VU64051 - Improper Certificate Validation
CVE-2022-22305
CWE-295 Medium
No
No
6.4.0, 7.0.0 08.06.2022 SB2022060801


Showing elements 21 - 40 out of 88