Known vulnerabilities in FortiOS - page 10

Software: FortiOS
Software CPE: cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
Total vulnerabilities: 286
Public exploits: 24
Known exploited (KEV): 21
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiOS FortiOS is affected by 286 known vulnerabilities: 13 critical, 32 high, 106 medium, 135 low Critical High Medium Low

Vulnerabilities (286)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU64051 - Improper Certificate Validation
CVE-2022-22305
CWE-295 Medium
No
No
6.4.0, 7.0.0 08.06.2022 SB2022060801
#VU62772 - Exposure of sensitive information to an unauthorized actor
CVE-2021-43206
CWE-200 Medium
No
No
6.4.9, 7.0.4 03.05.2022 SB2022050316
SB2022050318
#VU62771 - Improper Certificate Validation
CVE-2022-22306
CWE-295 Medium
No
No
6.4.9, 7.0.1 03.05.2022 SB2022050316
#VU62770 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-43081
CWE-79 Medium
No
No
6.4.9, 7.0.4 03.05.2022 SB2022050316
SB2022050317
#VU62769 - Improper Access Control
CVE-2021-41032
CWE-284 Medium
No
No
6.4.9, 7.0.4 03.05.2022 SB2022050316
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778
CWE-835 Medium
Available
No
6.4.9, 7.2.0 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more
#VU60931 - Exposure of sensitive information to an unauthorized actor
CVE-2020-15936
CWE-200 Medium
No
No
- 01.03.2022 SB2022030124
#VU60735 - Download of Code Without Integrity Check
CVE-2021-44168
CWE-494 Medium
Available
Exploited
6.0.14, 6.2.10, 6.4.8, 7.0.3 21.02.2022 SB2022022111
#VU58631 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-41024
CWE-22 Medium
No
No
7.0.2 07.12.2021 SB2021120718
#VU58630 - Improper Access Control
CVE-2021-26110
CWE-284 Low
No
No
6.0.13, 6.2.10, 6.4.7, 7.0.1 07.12.2021 SB2021120717
#VU58629 - Cross-Site Request Forgery (CSRF)
CVE-2021-26103
CWE-352 Medium
No
No
6.2.10, 6.4.7, 7.0.1 07.12.2021 SB2021120716
#VU58628 - Use of Hard-coded Cryptographic Key
CVE-2021-26108
CWE-321 Medium
No
No
5.6.14, 6.0.13, 6.2.10, 6.4.6 07.12.2021 SB2021120714
#VU58627 - Integer overflow
CVE-2021-26109
CWE-190 Critical
No
No
6.0.13, 6.2.10, 6.4.6, 7.0.1 07.12.2021 SB2021120715
#VU58174 - Improper Validation of Certificate with Host Mismatch
CVE-2021-41019
CWE-297 Low
No
No
6.2.10, 6.4.7, 7.0.2 16.11.2021 SB2021111604
#VU56381 - Improper Access Control
CVE-2021-32600
CWE-284 Low
No
No
6.4.7, 7.0.1 07.09.2021 SB2021090715
#VU56380 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-36169
CWE-94 Low
No
No
6.4.7, 7.0.1 07.09.2021 SB2021090715
#VU55546 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16151
CWE-79 Medium
No
No
6.4.2 03.08.2021 SB2021080314
#VU55545 - Memory corruption
CVE-2021-24018
CWE-119 Medium
No
No
7.0.1 03.08.2021 SB2021080313
#VU54848 - Improper Authentication
CVE-2021-26088
CWE-287 Medium
Available
No
6.4.6, 7.0.1 14.07.2021 SB2021071406
#VU53718 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-26092
CWE-79 Medium
No
No
6.0.13, 6.2.8, 6.4.6 01.06.2021 SB2021060124


Showing elements 181 - 200 out of 286