Known vulnerabilities in FortiOS - page 11

Software: FortiOS
Software CPE: cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
Total vulnerabilities: 292
Public exploits: 24
Known exploited (KEV): 22

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiOS FortiOS is affected by 292 known vulnerabilities: 13 critical, 33 high, 109 medium, 137 low Critical High Medium Low

Vulnerabilities (292)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU55546 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16151
CWE-79 Medium
No
No
6.4.2 03.08.2021 SB2021080314
#VU55545 - Memory corruption
CVE-2021-24018
CWE-119 Medium
No
No
7.0.1 03.08.2021 SB2021080313
#VU54848 - Improper Authentication
CVE-2021-26088
CWE-287 Medium
Available
No
6.4.6, 7.0.1 14.07.2021 SB2021071406
#VU53718 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-26092
CWE-79 Medium
No
No
6.0.13, 6.2.8, 6.4.6 01.06.2021 SB2021060124
#VU53716 - Improper Certificate Validation
CVE-2021-24012
CWE-295 Medium
No
No
6.4.5 01.06.2021 SB2021060120
#VU51226 - Cleartext Storage of Sensitive Information
CVE-2020-6648
CWE-312 Low
No
No
6.2.5 04.03.2021 SB2020101917
SB2021030421
#VU49278 - Exposure of sensitive information to an unauthorized actor
CVE-2020-29010
CWE-200 Medium
No
No
6.0.11, 6.2.5, 6.4.2 05.01.2021 SB2021010511
#VU48748 - Protection Mechanism Failure
CVE-2020-9295
CWE-693 Medium
No
No
- 02.12.2020 SB2020120210
#VU48747 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-15937
CWE-79 Low
No
No
6.2.6, 6.4.2 02.12.2020 SB2020120209
#VU47186 - Stack-based buffer overflow
CVE-2020-12820
CWE-121 Medium
No
No
5.6.13, 6.0.11 30.09.2020 SB2020093081
#VU47185 - Heap-based Buffer Overflow
CVE-2020-12819
CWE-122 Medium
No
No
5.6.13, 6.0.11, 6.2.5, 6.4.2 30.09.2020 SB2020093081
#VU47004 - Insufficient Logging
CVE-2020-12818
CWE-778 Medium
No
No
6.4.1 24.09.2020 SB2020092406
#VU46818 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-15706
CWE-79 Low
No
No
5.6.13, 6.0.9, 6.2.2 18.09.2020 SB2020091804
SB2021050508
#VU50300 - Memory corruption
CVE-2018-13381
CWE-119 High
No
No
5.6.8, 6.0.5 04.06.2019 SB2019051712
SB2021020333
#VU40913 - Improper input validation
CVE-2015-1452
CWE-20 Medium
No
No
- 02.02.2015 SB2015020210
#VU40914 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-1451
CWE-79 Low
No
No
- 02.02.2015 SB2015020211
#VU41343 - Cryptographic Issues
CVE-2014-0351
CWE-310 Medium
No
No
- 10.09.2014 SB2014091002
#VU41381 - Improper input validation
CVE-2014-2216
CWE-20 Medium
No
No
- 25.08.2014 SB2014082502
#VU42079 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-7182
CWE-79 Low
No
No
- 04.02.2014 SB2014020404
#VU42771 - Permissions, Privileges, and Access Controls
CVE-2013-4604
CWE-264 Low
No
No
- 25.06.2013 SB2013062501


Showing elements 201 - 220 out of 292