Known vulnerabilities in FortiOS 6.0.1 - page 3

Software: FortiOS
Version: 6.0.1
Software CPE: cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
Total vulnerabilities: 88
Public exploits: 9
Known exploited (KEV): 11
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting FortiOS version 6.0.1 FortiOS 6.0.1 is affected by 88 vulnerabilities: 3 critical, 9 high, 43 medium, 33 low Critical High Medium Low

Vulnerabilities (88)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU62772 - Exposure of sensitive information to an unauthorized actor
CVE-2021-43206
CWE-200 Medium
No
No
6.4.9, 7.0.4 03.05.2022 SB2022050316
SB2022050318
#VU62771 - Improper Certificate Validation
CVE-2022-22306
CWE-295 Medium
No
No
6.4.9, 7.0.1 03.05.2022 SB2022050316
#VU62770 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-43081
CWE-79 Medium
No
No
6.4.9, 7.0.4 03.05.2022 SB2022050316
SB2022050317
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778
CWE-835 Medium
Public exploit available
No
6.4.9, 7.2.0 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more
#VU60931 - Exposure of sensitive information to an unauthorized actor
CVE-2020-15936
CWE-200 Medium
No
No
- 01.03.2022 SB2022030124
#VU60735 - Download of Code Without Integrity Check
CVE-2021-44168
CWE-494 Medium
Public exploit available
Exploited
6.0.14, 6.2.10, 6.4.8, 7.0.3 21.02.2022 SB2022022111
#VU58630 - Improper Access Control
CVE-2021-26110
CWE-284 Low
No
No
6.0.13, 6.2.10, 6.4.7, 7.0.1 07.12.2021 SB2021120717
#VU58629 - Cross-Site Request Forgery (CSRF)
CVE-2021-26103
CWE-352 Medium
No
No
6.2.10, 6.4.7, 7.0.1 07.12.2021 SB2021120716
#VU58628 - Use of Hard-coded Cryptographic Key
CVE-2021-26108
CWE-321 Medium
No
No
5.6.14, 6.0.13, 6.2.10, 6.4.6 07.12.2021 SB2021120714
#VU58627 - Integer overflow
CVE-2021-26109
CWE-190 Critical
No
No
6.0.13, 6.2.10, 6.4.6, 7.0.1 07.12.2021 SB2021120715
#VU56381 - Improper Access Control
CVE-2021-32600
CWE-284 Low
No
No
6.4.7, 7.0.1 07.09.2021 SB2021090715
#VU54848 - Improper Authentication
CVE-2021-26088
CWE-287 Medium
Public exploit available
No
6.4.6, 7.0.1 14.07.2021 SB2021071406
#VU53718 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-26092
CWE-79 Medium
No
No
6.0.13, 6.2.8, 6.4.6 01.06.2021 SB2021060124
#VU49278 - Exposure of sensitive information to an unauthorized actor
CVE-2020-29010
CWE-200 Medium
No
No
6.0.11, 6.2.5, 6.4.2 05.01.2021 SB2021010511
#VU47186 - Stack-based buffer overflow
CVE-2020-12820
CWE-121 Medium
No
No
5.6.13, 6.0.11 30.09.2020 SB2020093081
#VU47185 - Heap-based Buffer Overflow
CVE-2020-12819
CWE-122 Medium
No
No
5.6.13, 6.0.11, 6.2.5, 6.4.2 30.09.2020 SB2020093081
#VU46818 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-15706
CWE-79 Low
No
No
5.6.13, 6.0.9, 6.2.2 18.09.2020 SB2020091804
SB2021050508
#VU30135 - Improper Authentication
CVE-2020-12812
CWE-287 High
No
Exploited
6.0.10, 6.2.4, 6.4.1 16.07.2020 SB20200716117
#VU23072 - Improper input validation
CVE-2019-15705
CWE-20 Medium
No
No
6.0.7, 6.2.2 28.11.2019 SB2019112805
#VU22967 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-6697
CWE-79 Low
No
No
6.0.7, 6.2.2 25.11.2019 SB2019112507


Showing elements 41 - 60 out of 88