Known vulnerabilities in FortiOS - page 13

Software: FortiOS
Software CPE: cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
Total vulnerabilities: 286
Public exploits: 24
Known exploited (KEV): 21
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiOS FortiOS is affected by 286 known vulnerabilities: 13 critical, 32 high, 106 medium, 135 low Critical High Medium Low

Vulnerabilities (286)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU17231 - Use of Externally-Controlled Format String
CVE-2018-1352
CWE-134 High
No
No
5.6.1 28.01.2019 SB2019011112
#VU16173 - Exposure of sensitive information to an unauthorized actor
CVE-2018-13366
CWE-200 Low
No
No
6.0.2 29.11.2018 SB2018112907
SB2018091704
SB2018092411
and 2 more
#VU16172 - Exposure of sensitive information to an unauthorized actor
CVE-2018-13374
CWE-200 Low
Available
Exploited
6.0.3 29.11.2018 SB2018112907
#VU16163 - Missing release of memory after effective lifetime
CVE-2018-13376
CWE-401 Low
No
No
5.4.8, 5.6.4, 6.0.0 22.11.2018 SB2018112907
#VU36728 - Improper input validation
CVE-2018-9192
CWE-20 Medium
No
No
- 05.09.2018 SB2018090516
#VU36729 - Improper input validation
CVE-2018-9194
CWE-20 Medium
No
No
- 05.09.2018 SB2018090517
#VU13526 - Exposure of sensitive information to an unauthorized actor
CVE-2018-9185
CWE-200 Low
No
No
6.0.1 26.06.2018 SB2018062911
#VU13019 - Command injection
CVE-2017-14187
CWE-77 Low
No
No
- 25.05.2018 SB2018052801
SB20240827110
#VU31354 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-0941
CWE-79 Low
No
No
4.3.6 09.02.2018 SB2018020927
#VU10304 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-14190
CWE-79 Low
No
No
- 25.01.2018 SB2018012206
SB2024072502
#VU9504 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2017-14186
CWE-601 Low
No
No
5.6.8, 6.0.5, 6.2.0 01.12.2017 SB2017120107
#VU9503 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-14186
CWE-79 Low
No
No
5.6.8, 6.0.5, 6.2.0 29.11.2017 SB2017120107
#VU9124 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-7739
CWE-79 Low
No
No
- 07.11.2017 SB2017110802
#VU8977 - Improper input validation
CVE-2017-14182
CWE-20 Low
No
No
- 30.10.2017 SB2017103003
#VU8978 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-7733
CWE-79 Low
No
No
- 27.10.2017 SB2017103003
#VU8841 - Key Management Errors
CVE-2017-13081
CWE-320 High
No
No
- 17.10.2017 SB2017101702
SB2017101704
SB2017101706
and 30 more
#VU8840 - Key Management Errors
CVE-2017-13080
CWE-320 Medium
No
No
- 17.10.2017 SB2017101702
SB2017101703
SB2017101704
and 78 more
#VU8839 - Key Management Errors
CVE-2017-13079
CWE-320 High
No
No
- 17.10.2017 SB2017101702
SB2017101704
SB2017101706
and 27 more
#VU8838 - Key Management Errors
CVE-2017-13078
CWE-320 High
No
No
- 17.10.2017 SB2017101702
SB2017101704
SB2017101706
and 30 more
#VU8837 - Key Management Errors
CVE-2017-13077
CWE-320 High
No
No
- 17.10.2017 SB2017101702
SB2017101704
SB2017101706
and 27 more


Showing elements 241 - 260 out of 286