Known vulnerabilities in FortiOS - page 5

Software: FortiOS
Software CPE: cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
Total vulnerabilities: 286
Public exploits: 24
Known exploited (KEV): 21
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiOS FortiOS is affected by 286 known vulnerabilities: 13 critical, 32 high, 106 medium, 135 low Critical High Medium Low

Vulnerabilities (286)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU102595 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2024-54021
CWE-113 Medium
No
No
7.2.9, 7.4.5, 7.6.1 14.01.2025 SB2025011435
#VU102594 - Exposure of sensitive information to an unauthorized actor
CVE-2024-46665
CWE-200 Low
No
No
7.4.5, 7.6.1 14.01.2025 SB2025011434
#VU102593 - Authentication Bypass Using an Alternate Path or Channel
CVE-2024-55591
CWE-288 Critical
Available
Exploited
7.0.17 14.01.2025 SB2025011431
#VU100595 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2024-33510
CWE-74 Low
No
No
7.2.9, 7.4.4 18.11.2024 SB2024111836
#VU100401 - Improper Authentication
CVE-2024-26011
CWE-287 Medium
No
No
7.0.15, 7.2.8, 7.4.4 12.11.2024 SB20241112152
SB20241112154
SB20241112155
and 3 more
#VU100395 - Session Fixation
CVE-2023-50176
CWE-384 Medium
No
No
7.0.14, 7.2.8, 7.4.4 12.11.2024 SB20241112148
#VU96016 - Security Features
CVE-2024-36505
CWE-254 Low
No
No
7.0.15, 7.2.8, 7.4.4 14.08.2024 SB2024081477
#VU96013 - Insufficient Session Expiration
CVE-2022-45862
CWE-613 Low
No
No
7.2.6 14.08.2024 SB2024081474
#VU94004 - Incorrect Calculation
CVE-2024-26015
CWE-682 Low
No
No
7.4.4 09.07.2024 SB20240709118
#VU93943 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-26006
CWE-79 Low
No
No
7.0.14, 7.2.8, 7.4.4 09.07.2024 SB2024070992
#VU91784 - Stack-based buffer overflow
CVE-2023-46720
CWE-121 Low
No
No
7.2.8, 7.4.4 11.06.2024 SB20240611284
#VU91783 - Use of Password Hash With Insufficient Computational Effort
CVE-2024-21754
CWE-916 Low
No
No
7.4.4 11.06.2024 SB20240611283
#VU91764 - Stack-based buffer overflow
CVE-2024-23110
CWE-121 Low
No
No
6.2.16, 6.4.15, 7.0.14, 7.2.7, 7.4.3 11.06.2024 SB20240611279
#VU91763 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-23111
CWE-79 Low
No
No
7.0.14, 7.2.8, 7.4.4 11.06.2024 SB20240611277
#VU91760 - Stack-based buffer overflow
CVE-2024-26010
CWE-121 Medium
No
No
7.0.15, 7.2.8, 7.4.4 11.06.2024 SB20240611274
#VU89658 - Use of Externally-Controlled Format String
CVE-2023-45583
CWE-134 Low
No
No
7.2.6, 7.4.1 20.05.2024 SB2024052014
#VU89656 - Use of Externally-Controlled Format String
CVE-2023-36640
CWE-134 Low
No
No
7.2.6, 7.4.1 20.05.2024 SB2024052014
#VU89602 - Double Free
CVE-2023-44247
CWE-415 Low
No
No
7.0.0 16.05.2024 SB2024051629
#VU89599 - Insufficient Verification of Data Authenticity
CVE-2023-45586
CWE-345 Low
No
No
7.0.13, 7.2.8, 7.4.2 16.05.2024 SB2024051626
#VU89568 - Stack-based buffer overflow
CVE-2023-46714
CWE-121 Medium
No
No
7.2.8, 7.4.2 15.05.2024 SB2024051539


Showing elements 81 - 100 out of 286