Known vulnerabilities in FortiOS - page 12

Software: FortiOS
Software CPE: cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
Total vulnerabilities: 286
Public exploits: 24
Known exploited (KEV): 21
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiOS FortiOS is affected by 286 known vulnerabilities: 13 critical, 32 high, 106 medium, 135 low Critical High Medium Low

Vulnerabilities (286)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU22855 - Use of Hard-coded Cryptographic Key
CVE-2019-6693
CWE-321 Low
No
Exploited
5.6.10, 6.0.7, 6.2.1 19.11.2019 SB2019111920
#VU20012 - Exposure of sensitive information to an unauthorized actor
CVE-2018-13367
CWE-200 Low
No
No
6.0.6, 6.2.1 09.08.2019 SB2019072802
#VU19505 - Improper Authorization
CVE-2019-5591
CWE-285 Low
No
Exploited
6.2.1 28.07.2019 SB2019072802
#VU31050 - Improper input validation
CVE-2019-5587
CWE-20 Medium
No
No
6.0.5 05.06.2019 SB2019052915
#VU31051 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2018-13384
CWE-601 Low
No
No
6.0.5 04.06.2019 SB2019052915
#VU50300 - Memory corruption
CVE-2018-13381
CWE-119 High
No
No
5.6.8, 6.0.5 04.06.2019 SB2019051712
SB2021020333
#VU31052 - Memory corruption
CVE-2018-13383
CWE-119 High
No
Exploited
6.0.5 29.05.2019 SB2019052915
SB2021020332
#VU18609 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-13379
CWE-22 High
Available
Exploited
5.6.8, 6.0.5, 6.2.0 27.05.2019 SB2019052703
SB2021060121
#VU18608 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-13380
CWE-79 Low
No
No
5.6.8, 6.0.5, 6.2.0 27.05.2019 SB2019052701
SB2021030421
#VU18607 - Improper Authorization
CVE-2018-13382
CWE-285 High
Available
Exploited
5.4.11, 5.6.9, 6.0.5, 6.2.0 27.05.2019 SB2019052702
SB2021060122
#VU18606 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-5588
CWE-79 Low
No
No
6.0.5, 6.2.0 27.05.2019 SB2019052701
#VU18605 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-5586
CWE-79 Low
No
No
6.0.5, 6.2.0 27.05.2019 SB2019052701
#VU18254 - Out-of-bounds write
CVE-2019-3863
CWE-787 Medium
No
No
5.6.11, 6.0.7, 6.2.1 15.04.2019 SB2019031904
SB2019041501
SB2019032002
and 20 more
#VU36016 - Improper input validation
CVE-2017-17544
CWE-20 Medium
No
No
6.2.0 09.04.2019 SB2019040932
#VU18028 - Out-of-bounds read
CVE-2019-3858
CWE-125 Medium
No
No
5.6.11, 6.0.7, 6.2.1 20.03.2019 SB2019031904
SB2019041501
SB2019032002
and 12 more
#VU18027 - Out-of-bounds read
CVE-2019-3859
CWE-125 Medium
No
No
5.6.11, 6.0.7, 6.2.1 20.03.2019 SB2019031904
SB2019041501
SB2019032002
and 15 more
#VU18026 - Out-of-bounds read
CVE-2019-3860
CWE-125 Medium
No
No
5.6.11, 6.0.7, 6.2.1 20.03.2019 SB2019031904
SB2019041501
SB2019032002
and 13 more
#VU18025 - Integer overflow
CVE-2019-3857
CWE-190 Medium
No
No
5.6.11, 6.0.7, 6.2.1 19.03.2019 SB2019031904
SB2019041501
SB2019032002
and 20 more
#VU18024 - Integer overflow
CVE-2019-3855
CWE-190 Medium
No
No
5.6.11, 6.0.7, 6.2.1 19.03.2019 SB2019031904
SB2019041501
SB2019032002
and 22 more
#VU18023 - Integer overflow
CVE-2019-3856
CWE-190 Medium
No
No
5.6.11, 6.0.7, 6.2.1 19.03.2019 SB2019031904
SB2019041501
SB2019032002
and 20 more


Showing elements 221 - 240 out of 286