Known vulnerabilities in FortiOS - page 3
Vendor:
Fortinet, Inc
Software:
FortiOS
Software CPE:
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
Website:
https://www.fortinet.com/
Total vulnerabilities:
292
Public exploits:
24
Known exploited (KEV):
22
Breakdown by Severity Chart
8.0.1
8.0.0
7.6.7
7.4.12
7.4.10
7.0.19
7.2.13
7.4.11
7.6.6
6.4.17
7.6.5
7.0.18
7.4.9
7.6.4
7.2.12
7.4.8
7.6.3
6.2.17
6.4.16
7.2.11
7.6.2
7.4.7
7.0.17
7.4.6
7.6.1
7.6.0
7.4.5
7.0.16
7.2.10
7.2.9
7.4.4
7.0.15
7.2.8
6.0.18
7.4.3
6.4.15
7.0.14
6.2.16
7.2.7
7.4.2
7.0.13
7.4.1
7.2.6
6.4.14
7.0.12
6.0.17
6.2.15
7.2.5
6.2.14
6.4.13
7.0.11
7.4.0
7.0.10
6.2.13
6.4.12
7.2.4
6.0.16
7.0.9
7.2.3
6.2.12
6.4.11
7.0.8
7.0.7
7.2.2
6.4.10
7.2.1
6.0.15
6.2.11
7.0.6
6.4.9
7.2.0
7.0.5
7.0.4
6.0.14
6.4.8
7.0.3
5.6.14
6.2.10
7.0.2
6.2.9
6.2.8
6.4.7
6.0.13
7.0.1
7.0.0
6.4.6
6.4.5
6.4.4
6.4.3
5.4.13
6.0.12
6.0.8
6.2.7
6.2.6
6.4.2
6.0.11
5.6.13
5.6.12
6.2.5
4.3.17
6.0.9
6.4.0
6.4.1
6.0.10
6.2.4
6.2.3
6.0.7
5.6.11
5.6.10
5.4.12
5.2.15
5.2.14
6.2.2
6.2.1
6.0.6
6.2.0
6.0.5
6.0.4
5.6.9
5.6.8
5.6.7
5.6.6
5.6.5
5.4.11
5.4.10
5.0.14
6.0.3
6.0.2
5.6.4
6.0.1
6.0.0
5.4.9
5.4.8
5.4.7
5.2.13
5.6.3
5.4.6
5.2.12
5.6.2
5.6.1
5.6.0
5.4.5
5.4.4
5.4.3
5.2.11
5.4.2
5.4.1
5.2.4
5.2.10
5.2.9
5.2.8
5.2.7
5.2.6
5.4
4.3.16
5.2.5
4.3.13
4.3.14
4.3.15
4.3.12
4.3.10
5.0
3.0
2.36
2.5 0mr4
3.0 beta
2.80
2.50 mr5
2.50
3.0 mr1
3 beta
2.8 mr10
4.3.9
4.3.8
4.3.7
4.3.6
4.3.5
4.3.4
4.3.3
4.3.2
4.3.1
4.3.0
4.2.13
4.2.12
4.2.11
4.2.10
4.2.9
4.2.8
4.2.7
4.2.6
4.2.5
4.2.4
4.2.3
4.2.2
4.2.1
4.2.0
4.1.11
4.1.10
4.1.9
4.1.8
4.1.7
4.1.6
4.1.5
4.1.4
4.1.3
4.1.2
4.1.1
4.1.0
5.4.0
5.2.3
5.2.2
5.2.1
5.2.0
5.0.13
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
5.0.0
Vulnerabilities (292)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU117143 - Heap-based Buffer Overflow CVE-2025-22258 |
CWE-122 | Low | 7.0.17, 7.2.11, 7.4.7, 7.6.3 | 15.10.2025 |
SB2025101503 |
||
| #VU117139 - Improper Authorization CVE-2025-54822 |
CWE-285 | Low | 7.2.9, 7.4.2 | 14.10.2025 |
SB20251014110 |
||
| #VU117136 - Heap-based Buffer Overflow CVE-2025-57740 |
CWE-122 | Medium | 7.2.11, 7.4.8, 7.6.3 | 14.10.2025 |
SB20251014108 |
||
| #VU117134 - Heap-based Buffer Overflow CVE-2024-50571 |
CWE-122 | Low | 6.4.16, 7.0.17, 7.2.11, 7.4.7, 7.6.3 | 14.10.2025 |
SB20251014106 |
||
| #VU117133 - Improperly Implemented Security Check for Standard CVE-2025-25255 |
CWE-358 | Low | 7.6.4 | 14.10.2025 |
SB20251014105 |
||
| #VU117130 - Improper Check or Handling of Exceptional Conditions CVE-2024-26008 |
CWE-703 | Medium | 7.2.8, 7.4.4 | 14.10.2025 |
SB20251014102 |
||
| #VU113970 - Incorrect Privilege Assignment CVE-2025-53744 |
CWE-266 | Low | 7.4.8, 7.6.3 | 12.08.2025 |
SB20250812105 |
||
| #VU113960 - Integer overflow CVE-2025-25248 |
CWE-190 | Low | 7.2.11, 7.4.8, 7.6.3 | 12.08.2025 |
SB2025081299 |
||
| #VU113958 - Authentication Bypass Using an Alternate Path or Channel CVE-2024-26009 |
CWE-288 | High | 6.2.17, 6.4.16 | 12.08.2025 |
SB2025081297 |
||
| #VU113906 - Double Free CVE-2023-45584 |
CWE-415 | Low | 7.0.13, 7.2.6, 7.4.1 | 12.08.2025 |
SB2025081281 |
||
| #VU112497 - Heap-based Buffer Overflow CVE-2025-24477 |
CWE-122 | Low | 7.2.12, 7.4.8, 7.6.3 | 08.07.2025 |
SB2025070845 |
||
| #VU112496 - Missing Critical Step in Authentication CVE-2024-52965 |
CWE-304 | Low | 7.0.17, 7.2.11, 7.4.6, 7.6.3 | 08.07.2025 |
SB2025070844 |
||
| #VU112495 - Improperly Implemented Security Check for Standard CVE-2024-55599 |
CWE-358 | Medium | 7.2.11, 7.4.8, 7.6.1 | 08.07.2025 |
SB2025070843 |
||
| #VU111054 - Improper Privilege Management CVE-2025-22254 |
CWE-269 | High | 6.4.16, 7.0.17, 7.2.11, 7.4.7, 7.6.2 | 11.06.2025 |
SB2025061119 |
||
| #VU111051 - Improper Certificate Validation CVE-2025-24471 |
CWE-295 | Low | 7.4.8, 7.6.2 | 11.06.2025 |
SB2025061116 |
||
| #VU111050 - Authentication Bypass Using an Alternate Path or Channel CVE-2025-22862 |
CWE-288 | Low | 7.4.8 | 11.06.2025 |
SB2025061115 |
||
| #VU111048 - Insufficient Session Expiration CVE-2024-50562 |
CWE-613 | Medium | 7.2.11, 7.4.8, 7.6.1 | 11.06.2025 |
SB2025061113 |
||
| #VU111047 - Improper Restriction of Communication Channel to Intended Endpoints CVE-2025-22251 |
CWE-923 | Low | 7.4.6, 7.6.1 | 11.06.2025 |
SB2025061112 |
||
| #VU111045 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2024-50568 |
CWE-300 | Medium | 7.2.9, 7.4.4 | 11.06.2025 |
SB2025061110 |
||
| #VU111042 - Incomplete cleanup CVE-2023-29184 |
CWE-459 | Low | - | 11.06.2025 |
SB2025061107 |
Showing elements 41 - 60 out of 292