Known vulnerabilities in FortiOS - page 14

Software: FortiOS
Software CPE: cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
Total vulnerabilities: 290
Public exploits: 24
Known exploited (KEV): 22
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiOS FortiOS is affected by 290 known vulnerabilities: 13 critical, 33 high, 108 medium, 136 low Critical High Medium Low

Vulnerabilities (290)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU8841 - Key Management Errors
CVE-2017-13081
CWE-320 High
No
No
- 17.10.2017 SB2017101702
SB2017101704
SB2017101706
and 30 more
#VU8840 - Key Management Errors
CVE-2017-13080
CWE-320 Medium
No
No
- 17.10.2017 SB2017101702
SB2017101703
SB2017101704
and 78 more
#VU8839 - Key Management Errors
CVE-2017-13079
CWE-320 High
No
No
- 17.10.2017 SB2017101702
SB2017101704
SB2017101706
and 27 more
#VU8838 - Key Management Errors
CVE-2017-13078
CWE-320 High
No
No
- 17.10.2017 SB2017101702
SB2017101704
SB2017101706
and 30 more
#VU38472 - Exposure of sensitive information to an unauthorized actor
CVE-2017-3130
CWE-200 Medium
No
No
- 10.08.2017 SB2017081038
#VU7597 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-3133
CWE-79 Low
Available
No
- 31.07.2017 SB2017073101
#VU7596 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-3132
CWE-79 Low
Available
No
- 31.07.2017 SB2017073101
#VU7595 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-3131
CWE-79 Low
Available
No
- 31.07.2017 SB2017073101
#VU7109 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-7735
CWE-79 Low
No
No
- 16.06.2017 SB2017061601
#VU7108 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-7734
CWE-79 Low
No
No
- 16.06.2017 SB2017061601
#VU6870 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-3127
CWE-79 Low
No
No
- 01.06.2017 SB2017042002
#VU6635 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-3128
CWE-79 Low
No
No
- 23.05.2017 SB2017052308
#VU39336 - Security Features
CVE-2016-7541
CWE-254 Medium
No
No
- 30.03.2017 SB2017033018
#VU5838 - Memory corruption
CVE-2016-6909
CWE-119 Critical
Available
No
- 16.02.2017 SB2016081401
#VU39672 - Exposure of sensitive information to an unauthorized actor
CVE-2016-8492
CWE-200 Medium
No
No
- 08.02.2017 SB2017020808
#VU1194 - Exposure of sensitive information to an unauthorized actor
CVE-2016-7542
CWE-200 Low
No
No
- 02.12.2016 SB2016120501
#VU322 - Memory corruption
CWE-119 High
No
No
- 18.08.2016 SB2016081801
#VU268 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-3978
CWE-601 Low
No
No
- 08.08.2016 SB2016051801
#VU40173 - Exposure of sensitive information to an unauthorized actor
CVE-2015-5738
CWE-200 Medium
No
No
- 26.07.2016 SB2016072609
#VU40524 - Permissions, Privileges, and Access Controls
CVE-2016-1909
CWE-264 High
Available
No
- 15.01.2016 SB2016011509


Showing elements 261 - 280 out of 290