Known vulnerabilities in FortiOS - page 3
Vendor:
Fortinet, Inc
Software:
FortiOS
Software CPE:
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
Website:
https://www.fortinet.com/
Total vulnerabilities:
290
Public exploits:
24
Known exploited (KEV):
22
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
7.6.7
7.4.12
7.4.10
7.0.19
7.2.13
7.4.11
7.6.6
6.4.17
7.6.5
7.0.18
7.4.9
7.6.4
7.2.12
7.4.8
7.6.3
6.2.17
6.4.16
7.2.11
7.6.2
7.4.7
7.0.17
7.4.6
7.6.1
7.6.0
7.4.5
7.0.16
7.2.10
7.2.9
7.4.4
7.0.15
7.2.8
6.0.18
7.4.3
6.4.15
7.0.14
6.2.16
7.2.7
7.4.2
7.0.13
7.4.1
7.2.6
6.4.14
7.0.12
6.0.17
6.2.15
7.2.5
6.2.14
6.4.13
7.0.11
7.4.0
7.0.10
6.2.13
6.4.12
7.2.4
6.0.16
7.0.9
7.2.3
6.2.12
6.4.11
7.0.8
7.0.7
7.2.2
6.4.10
7.2.1
6.0.15
6.2.11
7.0.6
6.4.9
7.2.0
7.0.5
7.0.4
6.0.14
6.4.8
7.0.3
5.6.14
6.2.10
7.0.2
6.2.9
6.2.8
6.4.7
6.0.13
7.0.1
7.0.0
6.4.6
6.4.5
6.4.4
6.4.3
5.4.13
6.0.12
6.0.8
6.2.7
6.2.6
6.4.2
6.0.11
5.6.13
5.6.12
6.2.5
4.3.17
6.0.9
6.4.0
6.4.1
6.0.10
6.2.4
6.2.3
6.0.7
5.6.11
5.6.10
5.4.12
5.2.15
5.2.14
6.2.2
6.2.1
6.0.6
6.2.0
6.0.5
6.0.4
5.6.9
5.6.8
5.6.7
5.6.6
5.6.5
5.4.11
5.4.10
5.0.14
6.0.3
6.0.2
5.6.4
6.0.1
6.0.0
5.4.9
5.4.8
5.4.7
5.2.13
5.6.3
5.4.6
5.2.12
5.6.2
5.6.1
5.6.0
5.4.5
5.4.4
5.4.3
5.2.11
5.4.2
5.4.1
5.2.4
5.2.10
5.2.9
5.2.8
5.2.7
5.2.6
5.4
4.3.16
5.2.5
4.3.13
4.3.14
4.3.15
4.3.12
4.3.10
5.0
3.0
2.36
2.5 0mr4
3.0 beta
2.80
2.50 mr5
2.50
3.0 mr1
3 beta
2.8 mr10
4.3.9
4.3.8
4.3.7
4.3.6
4.3.5
4.3.4
4.3.3
4.3.2
4.3.1
4.3.0
4.2.13
4.2.12
4.2.11
4.2.10
4.2.9
4.2.8
4.2.7
4.2.6
4.2.5
4.2.4
4.2.3
4.2.2
4.2.1
4.2.0
4.1.11
4.1.10
4.1.9
4.1.8
4.1.7
4.1.6
4.1.5
4.1.4
4.1.3
4.1.2
4.1.1
4.1.0
5.4.0
5.2.3
5.2.2
5.2.1
5.2.0
5.0.13
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
5.0.0
Vulnerabilities (290)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU117143 - Heap-based Buffer Overflow CVE-2025-22258 |
CWE-122 | Low | 7.0.17, 7.2.11, 7.4.7, 7.6.3 | 15.10.2025 |
SB2025101503 |
||
| #VU117139 - Improper Authorization CVE-2025-54822 |
CWE-285 | Low | 7.2.9, 7.4.2 | 14.10.2025 |
SB20251014110 |
||
| #VU117136 - Heap-based Buffer Overflow CVE-2025-57740 |
CWE-122 | Medium | 7.2.11, 7.4.8, 7.6.3 | 14.10.2025 |
SB20251014108 |
||
| #VU117134 - Heap-based Buffer Overflow CVE-2024-50571 |
CWE-122 | Low | 6.4.16, 7.0.17, 7.2.11, 7.4.7, 7.6.3 | 14.10.2025 |
SB20251014106 |
||
| #VU117133 - Improperly Implemented Security Check for Standard CVE-2025-25255 |
CWE-358 | Low | 7.6.4 | 14.10.2025 |
SB20251014105 |
||
| #VU117130 - Improper Check or Handling of Exceptional Conditions CVE-2024-26008 |
CWE-703 | Medium | 7.2.8, 7.4.4 | 14.10.2025 |
SB20251014102 |
||
| #VU113970 - Incorrect Privilege Assignment CVE-2025-53744 |
CWE-266 | Low | 7.4.8, 7.6.3 | 12.08.2025 |
SB20250812105 |
||
| #VU113960 - Integer overflow CVE-2025-25248 |
CWE-190 | Low | 7.2.11, 7.4.8, 7.6.3 | 12.08.2025 |
SB2025081299 |
||
| #VU113958 - Authentication Bypass Using an Alternate Path or Channel CVE-2024-26009 |
CWE-288 | High | 6.2.17, 6.4.16 | 12.08.2025 |
SB2025081297 |
||
| #VU113906 - Double Free CVE-2023-45584 |
CWE-415 | Low | 7.0.13, 7.2.6, 7.4.1 | 12.08.2025 |
SB2025081281 |
||
| #VU112497 - Heap-based Buffer Overflow CVE-2025-24477 |
CWE-122 | Low | 7.2.12, 7.4.8, 7.6.3 | 08.07.2025 |
SB2025070845 |
||
| #VU112496 - Missing Critical Step in Authentication CVE-2024-52965 |
CWE-304 | Low | 7.0.17, 7.2.11, 7.4.6, 7.6.3 | 08.07.2025 |
SB2025070844 |
||
| #VU112495 - Improperly Implemented Security Check for Standard CVE-2024-55599 |
CWE-358 | Medium | 7.2.11, 7.4.8, 7.6.1 | 08.07.2025 |
SB2025070843 |
||
| #VU111054 - Improper Privilege Management CVE-2025-22254 |
CWE-269 | High | 6.4.16, 7.0.17, 7.2.11, 7.4.7, 7.6.2 | 11.06.2025 |
SB2025061119 |
||
| #VU111051 - Improper Certificate Validation CVE-2025-24471 |
CWE-295 | Low | 7.4.8, 7.6.2 | 11.06.2025 |
SB2025061116 |
||
| #VU111050 - Authentication Bypass Using an Alternate Path or Channel CVE-2025-22862 |
CWE-288 | Low | 7.4.8 | 11.06.2025 |
SB2025061115 |
||
| #VU111048 - Insufficient Session Expiration CVE-2024-50562 |
CWE-613 | Medium | 7.2.11, 7.4.8, 7.6.1 | 11.06.2025 |
SB2025061113 |
||
| #VU111047 - Improper Restriction of Communication Channel to Intended Endpoints CVE-2025-22251 |
CWE-923 | Low | 7.4.6, 7.6.1 | 11.06.2025 |
SB2025061112 |
||
| #VU111045 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2024-50568 |
CWE-300 | Medium | 7.2.9, 7.4.4 | 11.06.2025 |
SB2025061110 |
||
| #VU111042 - Incomplete cleanup CVE-2023-29184 |
CWE-459 | Low | - | 11.06.2025 |
SB2025061107 |
Showing elements 41 - 60 out of 290