Known vulnerabilities in FortiOS - page 14

Software: FortiOS
Software CPE: cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
Total vulnerabilities: 286
Public exploits: 24
Known exploited (KEV): 21
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiOS FortiOS is affected by 286 known vulnerabilities: 13 critical, 32 high, 106 medium, 135 low Critical High Medium Low

Vulnerabilities (286)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU38472 - Exposure of sensitive information to an unauthorized actor
CVE-2017-3130
CWE-200 Medium
No
No
- 10.08.2017 SB2017081038
#VU7597 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-3133
CWE-79 Low
Available
No
- 31.07.2017 SB2017073101
#VU7596 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-3132
CWE-79 Low
Available
No
- 31.07.2017 SB2017073101
#VU7595 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-3131
CWE-79 Low
Available
No
- 31.07.2017 SB2017073101
#VU7109 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-7735
CWE-79 Low
No
No
- 16.06.2017 SB2017061601
#VU7108 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-7734
CWE-79 Low
No
No
- 16.06.2017 SB2017061601
#VU6870 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-3127
CWE-79 Low
No
No
- 01.06.2017 SB2017042002
#VU6635 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-3128
CWE-79 Low
No
No
- 23.05.2017 SB2017052308
#VU39336 - Security Features
CVE-2016-7541
CWE-254 Medium
No
No
- 30.03.2017 SB2017033018
#VU5838 - Memory corruption
CVE-2016-6909
CWE-119 Critical
Available
No
- 16.02.2017 SB2016081401
#VU39672 - Exposure of sensitive information to an unauthorized actor
CVE-2016-8492
CWE-200 Medium
No
No
- 08.02.2017 SB2017020808
#VU1194 - Exposure of sensitive information to an unauthorized actor
CVE-2016-7542
CWE-200 Low
No
No
- 02.12.2016 SB2016120501
#VU322 - Memory corruption
CWE-119 High
No
No
- 18.08.2016 SB2016081801
#VU268 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-3978
CWE-601 Low
No
No
- 08.08.2016 SB2016051801
#VU40173 - Exposure of sensitive information to an unauthorized actor
CVE-2015-5738
CWE-200 Medium
No
No
- 26.07.2016 SB2016072609
#VU40524 - Permissions, Privileges, and Access Controls
CVE-2016-1909
CWE-264 High
Available
No
- 15.01.2016 SB2016011509
#VU40639 - Improper Authentication
CVE-2015-7361
CWE-287 High
No
No
- 15.10.2015 SB2015101505
#VU40678 - Cryptographic Issues
CVE-2015-2323
CWE-310 Medium
No
No
- 11.08.2015 SB2015081113
#VU40794 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-1880
CWE-79 Low
No
No
- 12.05.2015 SB2015051205
#VU40795 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-8616
CWE-79 Low
No
No
- 12.05.2015 SB2015051206


Showing elements 261 - 280 out of 286