Known vulnerabilities in FortiOS - page 2

Software: FortiOS
Software CPE: cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
Total vulnerabilities: 286
Public exploits: 24
Known exploited (KEV): 21
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiOS FortiOS is affected by 286 known vulnerabilities: 13 critical, 32 high, 106 medium, 135 low Critical High Medium Low

Vulnerabilities (286)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU119482 - Information Exposure Through Log Files
CVE-2024-47570
CWE-532 Low
No
No
7.2.8, 7.4.4 09.12.2025 SB2025120983
#VU119429 - Insufficient Session Expiration
CVE-2025-62631
CWE-613 Medium
No
No
7.4.1 09.12.2025 SB2025120945
#VU119426 - Key Management Errors
CVE-2024-40593
CWE-320 Low
No
No
7.0.15, 7.2.8, 7.4.5, 7.6.1 09.12.2025 SB2025120942
#VU118605 - Stack-based buffer overflow
CVE-2025-58413
CWE-121 Medium
No
No
7.4.9, 7.6.4 18.11.2025 SB2025111874
#VU118604 - Improper Privilege Management
CVE-2025-54821
CWE-269 Low
No
No
7.6.4 18.11.2025 SB2025111873
#VU118602 - Buffer Underwrite ('Buffer Underflow')
CVE-2025-53843
CWE-124 Low
No
No
7.4.9, 7.6.4 18.11.2025 SB2025111871
#VU117646 - Use of Uninitialized Resource
CVE-2023-37930
CWE-908 Medium
No
No
6.4.15, 7.0.13, 7.2.6, 7.4.1 24.10.2025 SB2025102464
#VU117428 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2025-47890
CWE-601 Low
No
No
7.4.9, 7.6.4 21.10.2025 SB2025102162
#VU117426 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-31366
CWE-79 Low
No
No
7.4.9, 7.6.4 21.10.2025 SB2025102162
#VU117217 - Stack-based buffer overflow
CVE-2023-46718
CWE-121 Low
No
No
7.2.12, 7.4.2 15.10.2025 SB2025101576
#VU117216 - Improper Validation of Certificate with Host Mismatch
CVE-2025-25253
CWE-297 Medium
No
No
7.4.9, 7.6.3 15.10.2025 SB2025101575
#VU117209 - Unchecked Return Value
CVE-2025-58903
CWE-252 Low
No
No
7.4.9, 7.6.4 15.10.2025 SB2025101567
#VU117207 - Incorrect Provision of Specified Functionality
CVE-2025-58325
CWE-684 Low
No
No
7.0.16, 7.2.11, 7.4.6, 7.6.1 15.10.2025 SB2025101565
#VU117148 - Insertion of Sensitive Information Into Sent Data
CVE-2024-47569
CWE-201 Low
No
No
6.4.16, 7.0.16, 7.2.9, 7.4.5, 7.6.1 15.10.2025 SB2025101507
#VU117146 - Information Exposure Through Log Files
CVE-2025-31514
CWE-532 Low
No
No
7.6.4 15.10.2025 SB2025101505
#VU117144 - Insufficient Session Expiration
CVE-2025-25252
CWE-613 Medium
No
No
7.0.17, 7.2.11, 7.4.7, 7.6.3 15.10.2025 SB2025101504
#VU117143 - Heap-based Buffer Overflow
CVE-2025-22258
CWE-122 Low
No
No
7.0.17, 7.2.11, 7.4.7, 7.6.3 15.10.2025 SB2025101503
#VU117139 - Improper Authorization
CVE-2025-54822
CWE-285 Low
No
No
7.2.9, 7.4.2 14.10.2025 SB20251014110
#VU117136 - Heap-based Buffer Overflow
CVE-2025-57740
CWE-122 Medium
No
No
7.2.11, 7.4.8, 7.6.3 14.10.2025 SB20251014108
#VU117134 - Heap-based Buffer Overflow
CVE-2024-50571
CWE-122 Low
No
No
6.4.16, 7.0.17, 7.2.11, 7.4.7, 7.6.3 14.10.2025 SB20251014106


Showing elements 21 - 40 out of 286