Known vulnerabilities in FortiOS - page 14

Software: FortiOS
Software CPE: cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
Total vulnerabilities: 292
Public exploits: 24
Known exploited (KEV): 22

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiOS FortiOS is affected by 292 known vulnerabilities: 13 critical, 33 high, 109 medium, 137 low Critical High Medium Low

Vulnerabilities (292)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU18608 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-13380
CWE-79 Low
No
No
5.6.8, 6.0.5, 6.2.0 27.05.2019 SB2019052701
SB2021030421
#VU18606 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-5588
CWE-79 Low
No
No
6.0.5, 6.2.0 27.05.2019 SB2019052701
#VU17231 - Use of Externally-Controlled Format String
CVE-2018-1352
CWE-134 High
No
No
5.6.1 28.01.2019 SB2019011112
#VU16173 - Exposure of sensitive information to an unauthorized actor
CVE-2018-13366
CWE-200 Low
No
No
6.0.2 29.11.2018 SB2018112907
SB2018091704
SB2018092411
and 2 more
#VU16172 - Exposure of sensitive information to an unauthorized actor
CVE-2018-13374
CWE-200 Low
Available
Exploited
6.0.3 29.11.2018 SB2018112907
#VU16163 - Missing release of memory after effective lifetime
CVE-2018-13376
CWE-401 Low
No
No
5.4.8, 5.6.4, 6.0.0 22.11.2018 SB2018112907
#VU13526 - Exposure of sensitive information to an unauthorized actor
CVE-2018-9185
CWE-200 Low
No
No
6.0.1 26.06.2018 SB2018062911
#VU13019 - Command injection
CVE-2017-14187
CWE-77 Low
No
No
- 25.05.2018 SB2018052801
SB20240827110
#VU10304 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-14190
CWE-79 Low
No
No
- 25.01.2018 SB2018012206
SB2024072502
#VU9504 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2017-14186
CWE-601 Low
No
No
5.6.8, 6.0.5, 6.2.0 01.12.2017 SB2017120107
#VU9503 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-14186
CWE-79 Low
No
No
5.6.8, 6.0.5, 6.2.0 29.11.2017 SB2017120107
#VU9124 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-7739
CWE-79 Low
No
No
- 07.11.2017 SB2017110802
#VU8977 - Improper input validation
CVE-2017-14182
CWE-20 Low
No
No
- 30.10.2017 SB2017103003
#VU8978 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-7733
CWE-79 Low
No
No
- 27.10.2017 SB2017103003
#VU8841 - Key Management Errors
CVE-2017-13081
CWE-320 High
No
No
- 17.10.2017 SB2017101702
SB2017101704
SB2017101706
and 30 more
#VU8840 - Key Management Errors
CVE-2017-13080
CWE-320 Medium
No
No
- 17.10.2017 SB2017101702
SB2017101703
SB2017101704
and 78 more
#VU8839 - Key Management Errors
CVE-2017-13079
CWE-320 High
No
No
- 17.10.2017 SB2017101702
SB2017101704
SB2017101706
and 27 more
#VU8838 - Key Management Errors
CVE-2017-13078
CWE-320 High
No
No
- 17.10.2017 SB2017101702
SB2017101704
SB2017101706
and 30 more
#VU8837 - Key Management Errors
CVE-2017-13077
CWE-320 High
No
No
- 17.10.2017 SB2017101702
SB2017101704
SB2017101706
and 27 more
#VU7595 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-3131
CWE-79 Low
Available
No
- 31.07.2017 SB2017073101


Showing elements 261 - 280 out of 292