Known vulnerabilities in FortiOS - page 2
Vendor:
Fortinet, Inc
Software:
FortiOS
Software CPE:
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
Website:
https://www.fortinet.com/
Total vulnerabilities:
290
Public exploits:
24
Known exploited (KEV):
22
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
7.6.7
7.4.12
7.4.10
7.0.19
7.2.13
7.4.11
7.6.6
6.4.17
7.6.5
7.0.18
7.4.9
7.6.4
7.2.12
7.4.8
7.6.3
6.2.17
6.4.16
7.2.11
7.6.2
7.4.7
7.0.17
7.4.6
7.6.1
7.6.0
7.4.5
7.0.16
7.2.10
7.2.9
7.4.4
7.0.15
7.2.8
6.0.18
7.4.3
6.4.15
7.0.14
6.2.16
7.2.7
7.4.2
7.0.13
7.4.1
7.2.6
6.4.14
7.0.12
6.0.17
6.2.15
7.2.5
6.2.14
6.4.13
7.0.11
7.4.0
7.0.10
6.2.13
6.4.12
7.2.4
6.0.16
7.0.9
7.2.3
6.2.12
6.4.11
7.0.8
7.0.7
7.2.2
6.4.10
7.2.1
6.0.15
6.2.11
7.0.6
6.4.9
7.2.0
7.0.5
7.0.4
6.0.14
6.4.8
7.0.3
5.6.14
6.2.10
7.0.2
6.2.9
6.2.8
6.4.7
6.0.13
7.0.1
7.0.0
6.4.6
6.4.5
6.4.4
6.4.3
5.4.13
6.0.12
6.0.8
6.2.7
6.2.6
6.4.2
6.0.11
5.6.13
5.6.12
6.2.5
4.3.17
6.0.9
6.4.0
6.4.1
6.0.10
6.2.4
6.2.3
6.0.7
5.6.11
5.6.10
5.4.12
5.2.15
5.2.14
6.2.2
6.2.1
6.0.6
6.2.0
6.0.5
6.0.4
5.6.9
5.6.8
5.6.7
5.6.6
5.6.5
5.4.11
5.4.10
5.0.14
6.0.3
6.0.2
5.6.4
6.0.1
6.0.0
5.4.9
5.4.8
5.4.7
5.2.13
5.6.3
5.4.6
5.2.12
5.6.2
5.6.1
5.6.0
5.4.5
5.4.4
5.4.3
5.2.11
5.4.2
5.4.1
5.2.4
5.2.10
5.2.9
5.2.8
5.2.7
5.2.6
5.4
4.3.16
5.2.5
4.3.13
4.3.14
4.3.15
4.3.12
4.3.10
5.0
3.0
2.36
2.5 0mr4
3.0 beta
2.80
2.50 mr5
2.50
3.0 mr1
3 beta
2.8 mr10
4.3.9
4.3.8
4.3.7
4.3.6
4.3.5
4.3.4
4.3.3
4.3.2
4.3.1
4.3.0
4.2.13
4.2.12
4.2.11
4.2.10
4.2.9
4.2.8
4.2.7
4.2.6
4.2.5
4.2.4
4.2.3
4.2.2
4.2.1
4.2.0
4.1.11
4.1.10
4.1.9
4.1.8
4.1.7
4.1.6
4.1.5
4.1.4
4.1.3
4.1.2
4.1.1
4.1.0
5.4.0
5.2.3
5.2.2
5.2.1
5.2.0
5.0.13
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
5.0.0
Vulnerabilities (290)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU121971 - Improper Verification of Cryptographic Signature CVE-2026-24858 |
CWE-347 | Critical | 7.0.19, 7.2.13, 7.4.11, 7.6.6 | 23.01.2026 |
SB2026012392 |
||
| #VU121226 - Heap-based Buffer Overflow CVE-2025-25249 |
CWE-122 | Critical | 6.4.17, 7.0.18, 7.2.12, 7.4.9, 7.6.4 | 13.01.2026 |
SB2026011365 |
||
| #VU119696 - Improper Verification of Cryptographic Signature CVE-2025-59719 |
CWE-347 | Critical | 7.0.18, 7.2.12, 7.4.9, 7.6.4 | 10.12.2025 |
SB2025121064 |
||
| #VU119694 - Improper Verification of Cryptographic Signature CVE-2025-59718 |
CWE-347 | Critical | 7.0.18, 7.2.12, 7.4.9, 7.6.4 | 10.12.2025 |
SB2025121064 |
||
| #VU119482 - Information Exposure Through Log Files CVE-2024-47570 |
CWE-532 | Low | 7.2.8, 7.4.4 | 09.12.2025 |
SB2025120983 |
||
| #VU119429 - Insufficient Session Expiration CVE-2025-62631 |
CWE-613 | Medium | 7.4.1 | 09.12.2025 |
SB2025120945 |
||
| #VU119426 - Key Management Errors CVE-2024-40593 |
CWE-320 | Low | 7.0.15, 7.2.8, 7.4.5, 7.6.1 | 09.12.2025 |
SB2025120942 |
||
| #VU118605 - Stack-based buffer overflow CVE-2025-58413 |
CWE-121 | Medium | 7.4.9, 7.6.4 | 18.11.2025 |
SB2025111874 |
||
| #VU118604 - Improper Privilege Management CVE-2025-54821 |
CWE-269 | Low | 7.6.4 | 18.11.2025 |
SB2025111873 |
||
| #VU118602 - Buffer Underwrite ('Buffer Underflow') CVE-2025-53843 |
CWE-124 | Low | 7.4.9, 7.6.4 | 18.11.2025 |
SB2025111871 |
||
| #VU117646 - Use of Uninitialized Resource CVE-2023-37930 |
CWE-908 | Medium | 6.4.15, 7.0.13, 7.2.6, 7.4.1 | 24.10.2025 |
SB2025102464 |
||
| #VU117428 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2025-47890 |
CWE-601 | Low | 7.4.9, 7.6.4 | 21.10.2025 |
SB2025102162 |
||
| #VU117426 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-31366 |
CWE-79 | Low | 7.4.9, 7.6.4 | 21.10.2025 |
SB2025102162 |
||
| #VU117217 - Stack-based buffer overflow CVE-2023-46718 |
CWE-121 | Low | 7.2.12, 7.4.2 | 15.10.2025 |
SB2025101576 |
||
| #VU117216 - Improper Validation of Certificate with Host Mismatch CVE-2025-25253 |
CWE-297 | Medium | 7.4.9, 7.6.3 | 15.10.2025 |
SB2025101575 |
||
| #VU117209 - Unchecked Return Value CVE-2025-58903 |
CWE-252 | Low | 7.4.9, 7.6.4 | 15.10.2025 |
SB2025101567 |
||
| #VU117207 - Incorrect Provision of Specified Functionality CVE-2025-58325 |
CWE-684 | Low | 7.0.16, 7.2.11, 7.4.6, 7.6.1 | 15.10.2025 |
SB2025101565 |
||
| #VU117148 - Insertion of Sensitive Information Into Sent Data CVE-2024-47569 |
CWE-201 | Low | 6.4.16, 7.0.16, 7.2.9, 7.4.5, 7.6.1 | 15.10.2025 |
SB2025101507 |
||
| #VU117146 - Information Exposure Through Log Files CVE-2025-31514 |
CWE-532 | Low | 7.6.4 | 15.10.2025 |
SB2025101505 |
||
| #VU117144 - Insufficient Session Expiration CVE-2025-25252 |
CWE-613 | Medium | 7.0.17, 7.2.11, 7.4.7, 7.6.3 | 15.10.2025 |
SB2025101504 |
Showing elements 21 - 40 out of 290