Known vulnerabilities in FortiOS - page 11

Software: FortiOS
Software CPE: cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
Total vulnerabilities: 286
Public exploits: 24
Known exploited (KEV): 21
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiOS FortiOS is affected by 286 known vulnerabilities: 13 critical, 32 high, 106 medium, 135 low Critical High Medium Low

Vulnerabilities (286)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU53716 - Improper Certificate Validation
CVE-2021-24012
CWE-295 Medium
No
No
6.4.5 01.06.2021 SB2021060120
#VU51226 - Cleartext Storage of Sensitive Information
CVE-2020-6648
CWE-312 Low
No
No
6.2.5 04.03.2021 SB2020101917
SB2021030421
#VU49278 - Exposure of sensitive information to an unauthorized actor
CVE-2020-29010
CWE-200 Medium
No
No
6.0.11, 6.2.5, 6.4.2 05.01.2021 SB2021010511
#VU48748 - Protection Mechanism Failure
CVE-2020-9295
CWE-693 Medium
No
No
- 02.12.2020 SB2020120210
#VU48747 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-15937
CWE-79 Low
No
No
6.2.6, 6.4.2 02.12.2020 SB2020120209
#VU47186 - Stack-based buffer overflow
CVE-2020-12820
CWE-121 Medium
No
No
5.6.13, 6.0.11 30.09.2020 SB2020093081
#VU47185 - Heap-based Buffer Overflow
CVE-2020-12819
CWE-122 Medium
No
No
5.6.13, 6.0.11, 6.2.5, 6.4.2 30.09.2020 SB2020093081
#VU47004 - Insufficient Logging
CVE-2020-12818
CWE-778 Medium
No
No
6.4.1 24.09.2020 SB2020092406
#VU46818 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-15706
CWE-79 Low
No
No
5.6.13, 6.0.9, 6.2.2 18.09.2020 SB2020091804
SB2021050508
#VU30135 - Improper Authentication
CVE-2020-12812
CWE-287 High
No
Exploited
6.0.10, 6.2.4, 6.4.1 16.07.2020 SB20200716117
#VU30254 - Cleartext Storage of Sensitive Information
CVE-2019-17655
CWE-312 Medium
No
No
6.2.3 16.06.2020 SB2020061621
SB2021030421
#VU34740 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2019-6696
CWE-601 Low
No
No
- 16.03.2020 SB2020031627
#VU34856 - Incorrect Default Permissions
CVE-2019-5593
CWE-276 Low
No
No
- 23.01.2020 SB2020012326
#VU23961 - Improper Authentication
CVE-2019-9496
CWE-287 Medium
No
No
6.2.3 06.01.2020 SB2019041715
SB2020010606
SB2020021601
and 9 more
#VU23960 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2019-9495
CWE-327 Low
No
No
6.2.2 06.01.2020 SB2019041715
SB2020010605
SB2020021601
and 8 more
#VU23959 - Exposure of sensitive information to an unauthorized actor
CVE-2019-9494
CWE-200 Medium
No
No
6.2.2 06.01.2020 SB2019041715
SB2020010605
SB2020021601
and 10 more
#VU23072 - Improper input validation
CVE-2019-15705
CWE-20 Medium
No
No
6.0.7, 6.2.2 28.11.2019 SB2019112805
#VU22967 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-6697
CWE-79 Low
No
No
6.0.7, 6.2.2 25.11.2019 SB2019112507
#VU18253 - Out-of-bounds read
CVE-2019-3862
CWE-125 Medium
No
No
5.6.11, 6.0.7, 6.2.1 15.04.2019 SB2019031904
SB2019041501
SB2019032002
and 16 more
#VU18252 - Out-of-bounds read
CVE-2019-3861
CWE-125 Low
No
No
5.6.11, 6.0.7, 6.2.1 15.04.2019 SB2019031904
SB2019041501
SB2019032002
and 12 more


Showing elements 201 - 220 out of 286