Known vulnerabilities in FortiOS - page 6

Software: FortiOS
Software CPE: cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
Total vulnerabilities: 290
Public exploits: 24
Known exploited (KEV): 22
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiOS FortiOS is affected by 290 known vulnerabilities: 13 critical, 33 high, 108 medium, 136 low Critical High Medium Low

Vulnerabilities (290)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU89658 - Use of Externally-Controlled Format String
CVE-2023-45583
CWE-134 Low
No
No
7.2.6, 7.4.1 20.05.2024 SB2024052014
#VU89602 - Double Free
CVE-2023-44247
CWE-415 Low
No
No
7.0.0 16.05.2024 SB2024051629
#VU89599 - Insufficient Verification of Data Authenticity
CVE-2023-45586
CWE-345 Low
No
No
7.0.13, 7.2.8, 7.4.2 16.05.2024 SB2024051626
#VU89568 - Stack-based buffer overflow
CVE-2023-46714
CWE-121 Medium
No
No
7.2.8, 7.4.2 15.05.2024 SB2024051539
#VU89565 - Improper Check for Unusual or Exceptional Conditions
CVE-2024-26007
CWE-754 Medium
No
No
7.4.2 15.05.2024 SB2024051536
#VU88235 - Exposure of sensitive information to an unauthorized actor
CVE-2024-23662
CWE-200 Medium
No
No
7.2.6, 7.4.2 09.04.2024 SB2024040956
#VU88234 - Use of Externally-Controlled Format String
CVE-2023-48784
CWE-134 Low
No
No
7.2.8, 7.4.2 09.04.2024 SB2024040955
#VU88233 - Insufficiently Protected Credentials
CVE-2023-41677
CWE-522 Medium
No
No
6.2.16, 6.4.15, 7.0.13, 7.2.7, 7.4.2 09.04.2024 SB2024040954
#VU87498 - Stack-based buffer overflow
CVE-2023-42790
CWE-121 High
No
No
6.2.16, 6.4.15, 7.0.13, 7.2.6, 7.4.2 13.03.2024 SB2024031331
#VU87497 - Out-of-bounds write
CVE-2023-42789
CWE-787 High
No
No
6.2.16, 6.4.15, 7.0.13, 7.2.6, 7.4.2 13.03.2024 SB2024031331
#VU87375 - Improper Authentication
CVE-2023-46717
CWE-287 Low
No
No
7.0.13, 7.2.7, 7.4.2 12.03.2024 SB20240312316
#VU87358 - Authorization Bypass Through User-Controlled Key
CVE-2024-23112
CWE-639 Low
No
No
6.4.15, 7.0.14, 7.2.7, 7.4.2 12.03.2024 SB20240312305
#VU86280 - Improper Certificate Validation
CVE-2023-47537
CWE-295 Medium
No
No
7.2.7, 7.4.2 09.02.2024 SB2024020903
SB2024031338
#VU86279 - Use of Externally-Controlled Format String
CVE-2024-23113
CWE-134 High
Available
Exploited
7.0.14, 7.2.7, 7.4.3 09.02.2024 SB2024020902
SB2024031338
#VU86278 - Out-of-bounds write
CVE-2024-21762
CWE-787 Critical
Available
Exploited
6.2.16, 6.4.15, 7.0.14, 7.2.7, 7.4.3 09.02.2024 SB2024020901
SB2024031338
#VU85208 - Improper Privilege Management
CVE-2023-44250
CWE-269 Medium
No
No
7.2.6, 7.4.2 09.01.2024 SB2024010969
SB2024031338
#VU84440 - Double Free
CVE-2023-41678
CWE-415 Medium
No
No
7.0.6 14.12.2023 SB2023121477
#VU84439 - Use of Externally-Controlled Format String
CVE-2023-36639
CWE-134 Medium
No
No
6.2.16, 6.4.13, 7.0.12, 7.2.5, 7.4.1 14.12.2023 SB2023121476
SB2024031818
#VU84435 - Improper Access Control
CVE-2023-47536
CWE-284 Low
No
No
7.2.1 14.12.2023 SB2023121449
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Available
Exploited
7.0.14, 7.2.7, 7.4.2 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 652 more


Showing elements 101 - 120 out of 290