Known vulnerabilities in FortiOS - page 2
Vendor:
Fortinet, Inc
Software:
FortiOS
Software CPE:
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
Website:
https://www.fortinet.com/
Total vulnerabilities:
286
Public exploits:
24
Known exploited (KEV):
21
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
7.6.7
7.4.12
7.4.10
7.0.19
7.2.13
7.4.11
7.6.6
6.4.17
7.6.5
7.0.18
7.4.9
7.6.4
7.2.12
7.4.8
7.6.3
6.2.17
6.4.16
7.2.11
7.6.2
7.4.7
7.0.17
7.4.6
7.6.1
7.6.0
7.4.5
7.0.16
7.2.10
7.2.9
7.4.4
7.0.15
7.2.8
6.0.18
7.4.3
6.4.15
7.0.14
6.2.16
7.2.7
7.4.2
7.0.13
7.4.1
7.2.6
6.4.14
7.0.12
6.0.17
6.2.15
7.2.5
6.2.14
6.4.13
7.0.11
7.4.0
7.0.10
6.2.13
6.4.12
7.2.4
6.0.16
7.0.9
7.2.3
6.2.12
6.4.11
7.0.8
7.0.7
7.2.2
6.4.10
7.2.1
6.0.15
6.2.11
7.0.6
6.4.9
7.2.0
7.0.5
7.0.4
6.0.14
6.4.8
7.0.3
5.6.14
6.2.10
7.0.2
6.2.9
6.2.8
6.4.7
6.0.13
7.0.1
7.0.0
6.4.6
6.4.5
6.4.4
6.4.3
5.4.13
6.0.12
6.0.8
6.2.7
6.2.6
6.4.2
6.0.11
5.6.13
5.6.12
6.2.5
4.3.17
6.0.9
6.4.0
6.4.1
6.0.10
6.2.4
6.2.3
6.0.7
5.6.11
5.6.10
5.4.12
5.2.15
5.2.14
6.2.2
6.2.1
6.0.6
6.2.0
6.0.5
6.0.4
5.6.9
5.6.8
5.6.7
5.6.6
5.6.5
5.4.11
5.4.10
5.0.14
6.0.3
6.0.2
5.6.4
6.0.1
6.0.0
5.4.9
5.4.8
5.4.7
5.2.13
5.6.3
5.4.6
5.2.12
5.6.2
5.6.1
5.6.0
5.4.5
5.4.4
5.4.3
5.2.11
5.4.2
5.4.1
5.2.4
5.2.10
5.2.9
5.2.8
5.2.7
5.2.6
5.4
4.3.16
5.2.5
4.3.13
4.3.14
4.3.15
4.3.12
4.3.10
5.0
3.0
2.36
2.5 0mr4
3.0 beta
2.80
2.50 mr5
2.50
3.0 mr1
3 beta
2.8 mr10
4.3.9
4.3.8
4.3.7
4.3.6
4.3.5
4.3.4
4.3.3
4.3.2
4.3.1
4.3.0
4.2.13
4.2.12
4.2.11
4.2.10
4.2.9
4.2.8
4.2.7
4.2.6
4.2.5
4.2.4
4.2.3
4.2.2
4.2.1
4.2.0
4.1.11
4.1.10
4.1.9
4.1.8
4.1.7
4.1.6
4.1.5
4.1.4
4.1.3
4.1.2
4.1.1
4.1.0
5.4.0
5.2.3
5.2.2
5.2.1
5.2.0
5.0.13
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
5.0.0
Vulnerabilities (286)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU119482 - Information Exposure Through Log Files CVE-2024-47570 |
CWE-532 | Low | 7.2.8, 7.4.4 | 09.12.2025 |
SB2025120983 |
||
| #VU119429 - Insufficient Session Expiration CVE-2025-62631 |
CWE-613 | Medium | 7.4.1 | 09.12.2025 |
SB2025120945 |
||
| #VU119426 - Key Management Errors CVE-2024-40593 |
CWE-320 | Low | 7.0.15, 7.2.8, 7.4.5, 7.6.1 | 09.12.2025 |
SB2025120942 |
||
| #VU118605 - Stack-based buffer overflow CVE-2025-58413 |
CWE-121 | Medium | 7.4.9, 7.6.4 | 18.11.2025 |
SB2025111874 |
||
| #VU118604 - Improper Privilege Management CVE-2025-54821 |
CWE-269 | Low | 7.6.4 | 18.11.2025 |
SB2025111873 |
||
| #VU118602 - Buffer Underwrite ('Buffer Underflow') CVE-2025-53843 |
CWE-124 | Low | 7.4.9, 7.6.4 | 18.11.2025 |
SB2025111871 |
||
| #VU117646 - Use of Uninitialized Resource CVE-2023-37930 |
CWE-908 | Medium | 6.4.15, 7.0.13, 7.2.6, 7.4.1 | 24.10.2025 |
SB2025102464 |
||
| #VU117428 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2025-47890 |
CWE-601 | Low | 7.4.9, 7.6.4 | 21.10.2025 |
SB2025102162 |
||
| #VU117426 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-31366 |
CWE-79 | Low | 7.4.9, 7.6.4 | 21.10.2025 |
SB2025102162 |
||
| #VU117217 - Stack-based buffer overflow CVE-2023-46718 |
CWE-121 | Low | 7.2.12, 7.4.2 | 15.10.2025 |
SB2025101576 |
||
| #VU117216 - Improper Validation of Certificate with Host Mismatch CVE-2025-25253 |
CWE-297 | Medium | 7.4.9, 7.6.3 | 15.10.2025 |
SB2025101575 |
||
| #VU117209 - Unchecked Return Value CVE-2025-58903 |
CWE-252 | Low | 7.4.9, 7.6.4 | 15.10.2025 |
SB2025101567 |
||
| #VU117207 - Incorrect Provision of Specified Functionality CVE-2025-58325 |
CWE-684 | Low | 7.0.16, 7.2.11, 7.4.6, 7.6.1 | 15.10.2025 |
SB2025101565 |
||
| #VU117148 - Insertion of Sensitive Information Into Sent Data CVE-2024-47569 |
CWE-201 | Low | 6.4.16, 7.0.16, 7.2.9, 7.4.5, 7.6.1 | 15.10.2025 |
SB2025101507 |
||
| #VU117146 - Information Exposure Through Log Files CVE-2025-31514 |
CWE-532 | Low | 7.6.4 | 15.10.2025 |
SB2025101505 |
||
| #VU117144 - Insufficient Session Expiration CVE-2025-25252 |
CWE-613 | Medium | 7.0.17, 7.2.11, 7.4.7, 7.6.3 | 15.10.2025 |
SB2025101504 |
||
| #VU117143 - Heap-based Buffer Overflow CVE-2025-22258 |
CWE-122 | Low | 7.0.17, 7.2.11, 7.4.7, 7.6.3 | 15.10.2025 |
SB2025101503 |
||
| #VU117139 - Improper Authorization CVE-2025-54822 |
CWE-285 | Low | 7.2.9, 7.4.2 | 14.10.2025 |
SB20251014110 |
||
| #VU117136 - Heap-based Buffer Overflow CVE-2025-57740 |
CWE-122 | Medium | 7.2.11, 7.4.8, 7.6.3 | 14.10.2025 |
SB20251014108 |
||
| #VU117134 - Heap-based Buffer Overflow CVE-2024-50571 |
CWE-122 | Low | 6.4.16, 7.0.17, 7.2.11, 7.4.7, 7.6.3 | 14.10.2025 |
SB20251014106 |
Showing elements 21 - 40 out of 286