Known vulnerabilities in FortiOS - page 12

Software: FortiOS
Software CPE: cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
Total vulnerabilities: 292
Public exploits: 24
Known exploited (KEV): 22

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiOS FortiOS is affected by 292 known vulnerabilities: 13 critical, 33 high, 109 medium, 137 low Critical High Medium Low

Vulnerabilities (292)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU30135 - Improper Authentication
CVE-2020-12812
CWE-287 High
No
Exploited
6.0.10, 6.2.4, 6.4.1 16.07.2020 SB20200716117
#VU30254 - Cleartext Storage of Sensitive Information
CVE-2019-17655
CWE-312 Medium
No
No
6.2.3 16.06.2020 SB2020061621
SB2021030421
#VU34740 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2019-6696
CWE-601 Low
No
No
- 16.03.2020 SB2020031627
#VU34856 - Incorrect Default Permissions
CVE-2019-5593
CWE-276 Low
No
No
- 23.01.2020 SB2020012326
#VU31050 - Improper input validation
CVE-2019-5587
CWE-20 Medium
No
No
6.0.5 05.06.2019 SB2019052915
#VU31051 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2018-13384
CWE-601 Low
No
No
6.0.5 04.06.2019 SB2019052915
#VU31052 - Memory corruption
CVE-2018-13383
CWE-119 High
No
Exploited
6.0.5 29.05.2019 SB2019052915
SB2021020332
#VU36016 - Improper input validation
CVE-2017-17544
CWE-20 Medium
No
No
6.2.0 09.04.2019 SB2019040932
#VU36728 - Improper input validation
CVE-2018-9192
CWE-20 Medium
No
No
- 05.09.2018 SB2018090516
#VU36729 - Improper input validation
CVE-2018-9194
CWE-20 Medium
No
No
- 05.09.2018 SB2018090517
#VU31354 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-0941
CWE-79 Low
No
No
4.3.6 09.02.2018 SB2018020927
#VU38472 - Exposure of sensitive information to an unauthorized actor
CVE-2017-3130
CWE-200 Medium
No
No
- 10.08.2017 SB2017081038
#VU39336 - Security Features
CVE-2016-7541
CWE-254 Medium
No
No
- 30.03.2017 SB2017033018
#VU39672 - Exposure of sensitive information to an unauthorized actor
CVE-2016-8492
CWE-200 Medium
No
No
- 08.02.2017 SB2017020808
#VU40173 - Exposure of sensitive information to an unauthorized actor
CVE-2015-5738
CWE-200 Medium
No
No
- 26.07.2016 SB2016072609
#VU40524 - Permissions, Privileges, and Access Controls
CVE-2016-1909
CWE-264 High
Available
No
- 15.01.2016 SB2016011509
#VU40639 - Improper Authentication
CVE-2015-7361
CWE-287 High
No
No
- 15.10.2015 SB2015101505
#VU40678 - Cryptographic Issues
CVE-2015-2323
CWE-310 Medium
No
No
- 11.08.2015 SB2015081113
#VU40794 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-1880
CWE-79 Low
No
No
- 12.05.2015 SB2015051205
#VU40795 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-8616
CWE-79 Low
No
No
- 12.05.2015 SB2015051206


Showing elements 221 - 240 out of 292