Known vulnerabilities in FortiOS - page 6

Software: FortiOS
Software CPE: cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
Total vulnerabilities: 286
Public exploits: 24
Known exploited (KEV): 21
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiOS FortiOS is affected by 286 known vulnerabilities: 13 critical, 32 high, 106 medium, 135 low Critical High Medium Low

Vulnerabilities (286)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU89565 - Improper Check for Unusual or Exceptional Conditions
CVE-2024-26007
CWE-754 Medium
No
No
7.4.2 15.05.2024 SB2024051536
#VU88235 - Exposure of sensitive information to an unauthorized actor
CVE-2024-23662
CWE-200 Medium
No
No
7.2.6, 7.4.2 09.04.2024 SB2024040956
#VU88234 - Use of Externally-Controlled Format String
CVE-2023-48784
CWE-134 Low
No
No
7.2.8, 7.4.2 09.04.2024 SB2024040955
#VU88233 - Insufficiently Protected Credentials
CVE-2023-41677
CWE-522 Medium
No
No
6.2.16, 6.4.15, 7.0.13, 7.2.7, 7.4.2 09.04.2024 SB2024040954
#VU87498 - Stack-based buffer overflow
CVE-2023-42790
CWE-121 High
No
No
6.2.16, 6.4.15, 7.0.13, 7.2.6, 7.4.2 13.03.2024 SB2024031331
#VU87497 - Out-of-bounds write
CVE-2023-42789
CWE-787 High
No
No
6.2.16, 6.4.15, 7.0.13, 7.2.6, 7.4.2 13.03.2024 SB2024031331
#VU87375 - Improper Authentication
CVE-2023-46717
CWE-287 Low
No
No
7.0.13, 7.2.7, 7.4.2 12.03.2024 SB20240312316
#VU87358 - Authorization Bypass Through User-Controlled Key
CVE-2024-23112
CWE-639 Low
No
No
6.4.15, 7.0.14, 7.2.7, 7.4.2 12.03.2024 SB20240312305
#VU86280 - Improper Certificate Validation
CVE-2023-47537
CWE-295 Medium
No
No
7.2.7, 7.4.2 09.02.2024 SB2024020903
SB2024031338
#VU86279 - Use of Externally-Controlled Format String
CVE-2024-23113
CWE-134 High
Available
Exploited
7.0.14, 7.2.7, 7.4.3 09.02.2024 SB2024020902
SB2024031338
#VU86278 - Out-of-bounds write
CVE-2024-21762
CWE-787 Critical
Available
Exploited
6.2.16, 6.4.15, 7.0.14, 7.2.7, 7.4.3 09.02.2024 SB2024020901
SB2024031338
#VU85208 - Improper Privilege Management
CVE-2023-44250
CWE-269 Medium
No
No
7.2.6, 7.4.2 09.01.2024 SB2024010969
SB2024031338
#VU84440 - Double Free
CVE-2023-41678
CWE-415 Medium
No
No
7.0.6 14.12.2023 SB2023121477
#VU84439 - Use of Externally-Controlled Format String
CVE-2023-36639
CWE-134 Medium
No
No
6.2.16, 6.4.13, 7.0.12, 7.2.5, 7.4.1 14.12.2023 SB2023121476
SB2024031818
#VU84435 - Improper Access Control
CVE-2023-47536
CWE-284 Low
No
No
7.2.1 14.12.2023 SB2023121449
#VU83247 - NULL Pointer Dereference
CVE-2023-36641
CWE-476 Medium
No
No
7.0.13, 7.2.6, 7.4.1 17.11.2023 SB2023111732
SB2024031818
#VU83246 - Improper Validation of Integrity Check Value
CVE-2023-28002
CWE-354 Low
No
No
7.0.13, 7.2.4, 7.4.0 17.11.2023 SB2023111731
SB2024031818
#VU81865 - Heap-based Buffer Overflow
CVE-2023-38545
CWE-122 High
Available
No
7.2.7, 7.4.2 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 99 more
#VU81863 - External Control of File Name or Path
CVE-2023-38546
CWE-73 Low
No
No
7.2.7, 7.4.2 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 125 more
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Available
Exploited
7.0.14, 7.2.7, 7.4.2 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 648 more


Showing elements 101 - 120 out of 286