Known vulnerabilities in FortiOS - page 6
Vendor:
Fortinet, Inc
Software:
FortiOS
Software CPE:
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
Website:
https://www.fortinet.com/
Total vulnerabilities:
290
Public exploits:
24
Known exploited (KEV):
22
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
7.6.7
7.4.12
7.4.10
7.0.19
7.2.13
7.4.11
7.6.6
6.4.17
7.6.5
7.0.18
7.4.9
7.6.4
7.2.12
7.4.8
7.6.3
6.2.17
6.4.16
7.2.11
7.6.2
7.4.7
7.0.17
7.4.6
7.6.1
7.6.0
7.4.5
7.0.16
7.2.10
7.2.9
7.4.4
7.0.15
7.2.8
6.0.18
7.4.3
6.4.15
7.0.14
6.2.16
7.2.7
7.4.2
7.0.13
7.4.1
7.2.6
6.4.14
7.0.12
6.0.17
6.2.15
7.2.5
6.2.14
6.4.13
7.0.11
7.4.0
7.0.10
6.2.13
6.4.12
7.2.4
6.0.16
7.0.9
7.2.3
6.2.12
6.4.11
7.0.8
7.0.7
7.2.2
6.4.10
7.2.1
6.0.15
6.2.11
7.0.6
6.4.9
7.2.0
7.0.5
7.0.4
6.0.14
6.4.8
7.0.3
5.6.14
6.2.10
7.0.2
6.2.9
6.2.8
6.4.7
6.0.13
7.0.1
7.0.0
6.4.6
6.4.5
6.4.4
6.4.3
5.4.13
6.0.12
6.0.8
6.2.7
6.2.6
6.4.2
6.0.11
5.6.13
5.6.12
6.2.5
4.3.17
6.0.9
6.4.0
6.4.1
6.0.10
6.2.4
6.2.3
6.0.7
5.6.11
5.6.10
5.4.12
5.2.15
5.2.14
6.2.2
6.2.1
6.0.6
6.2.0
6.0.5
6.0.4
5.6.9
5.6.8
5.6.7
5.6.6
5.6.5
5.4.11
5.4.10
5.0.14
6.0.3
6.0.2
5.6.4
6.0.1
6.0.0
5.4.9
5.4.8
5.4.7
5.2.13
5.6.3
5.4.6
5.2.12
5.6.2
5.6.1
5.6.0
5.4.5
5.4.4
5.4.3
5.2.11
5.4.2
5.4.1
5.2.4
5.2.10
5.2.9
5.2.8
5.2.7
5.2.6
5.4
4.3.16
5.2.5
4.3.13
4.3.14
4.3.15
4.3.12
4.3.10
5.0
3.0
2.36
2.5 0mr4
3.0 beta
2.80
2.50 mr5
2.50
3.0 mr1
3 beta
2.8 mr10
4.3.9
4.3.8
4.3.7
4.3.6
4.3.5
4.3.4
4.3.3
4.3.2
4.3.1
4.3.0
4.2.13
4.2.12
4.2.11
4.2.10
4.2.9
4.2.8
4.2.7
4.2.6
4.2.5
4.2.4
4.2.3
4.2.2
4.2.1
4.2.0
4.1.11
4.1.10
4.1.9
4.1.8
4.1.7
4.1.6
4.1.5
4.1.4
4.1.3
4.1.2
4.1.1
4.1.0
5.4.0
5.2.3
5.2.2
5.2.1
5.2.0
5.0.13
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
5.0.0
Vulnerabilities (290)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU89658 - Use of Externally-Controlled Format String CVE-2023-45583 |
CWE-134 | Low | 7.2.6, 7.4.1 | 20.05.2024 |
SB2024052014 |
||
| #VU89602 - Double Free CVE-2023-44247 |
CWE-415 | Low | 7.0.0 | 16.05.2024 |
SB2024051629 |
||
| #VU89599 - Insufficient Verification of Data Authenticity CVE-2023-45586 |
CWE-345 | Low | 7.0.13, 7.2.8, 7.4.2 | 16.05.2024 |
SB2024051626 |
||
| #VU89568 - Stack-based buffer overflow CVE-2023-46714 |
CWE-121 | Medium | 7.2.8, 7.4.2 | 15.05.2024 |
SB2024051539 |
||
| #VU89565 - Improper Check for Unusual or Exceptional Conditions CVE-2024-26007 |
CWE-754 | Medium | 7.4.2 | 15.05.2024 |
SB2024051536 |
||
| #VU88235 - Exposure of sensitive information to an unauthorized actor CVE-2024-23662 |
CWE-200 | Medium | 7.2.6, 7.4.2 | 09.04.2024 |
SB2024040956 |
||
| #VU88234 - Use of Externally-Controlled Format String CVE-2023-48784 |
CWE-134 | Low | 7.2.8, 7.4.2 | 09.04.2024 |
SB2024040955 |
||
| #VU88233 - Insufficiently Protected Credentials CVE-2023-41677 |
CWE-522 | Medium | 6.2.16, 6.4.15, 7.0.13, 7.2.7, 7.4.2 | 09.04.2024 |
SB2024040954 |
||
| #VU87498 - Stack-based buffer overflow CVE-2023-42790 |
CWE-121 | High | 6.2.16, 6.4.15, 7.0.13, 7.2.6, 7.4.2 | 13.03.2024 |
SB2024031331 |
||
| #VU87497 - Out-of-bounds write CVE-2023-42789 |
CWE-787 | High | 6.2.16, 6.4.15, 7.0.13, 7.2.6, 7.4.2 | 13.03.2024 |
SB2024031331 |
||
| #VU87375 - Improper Authentication CVE-2023-46717 |
CWE-287 | Low | 7.0.13, 7.2.7, 7.4.2 | 12.03.2024 |
SB20240312316 |
||
| #VU87358 - Authorization Bypass Through User-Controlled Key CVE-2024-23112 |
CWE-639 | Low | 6.4.15, 7.0.14, 7.2.7, 7.4.2 | 12.03.2024 |
SB20240312305 |
||
| #VU86280 - Improper Certificate Validation CVE-2023-47537 |
CWE-295 | Medium | 7.2.7, 7.4.2 | 09.02.2024 |
SB2024020903 SB2024031338 |
||
| #VU86279 - Use of Externally-Controlled Format String CVE-2024-23113 |
CWE-134 | High | 7.0.14, 7.2.7, 7.4.3 | 09.02.2024 |
SB2024020902 SB2024031338 |
||
| #VU86278 - Out-of-bounds write CVE-2024-21762 |
CWE-787 | Critical | 6.2.16, 6.4.15, 7.0.14, 7.2.7, 7.4.3 | 09.02.2024 |
SB2024020901 SB2024031338 |
||
| #VU85208 - Improper Privilege Management CVE-2023-44250 |
CWE-269 | Medium | 7.2.6, 7.4.2 | 09.01.2024 |
SB2024010969 SB2024031338 |
||
| #VU84440 - Double Free CVE-2023-41678 |
CWE-415 | Medium | 7.0.6 | 14.12.2023 |
SB2023121477 |
||
| #VU84439 - Use of Externally-Controlled Format String CVE-2023-36639 |
CWE-134 | Medium | 6.2.16, 6.4.13, 7.0.12, 7.2.5, 7.4.1 | 14.12.2023 |
SB2023121476 SB2024031818 |
||
| #VU84435 - Improper Access Control CVE-2023-47536 |
CWE-284 | Low | 7.2.1 | 14.12.2023 |
SB2023121449 |
||
| #VU81728 - Resource exhaustion CVE-2023-44487 |
CWE-400 | High | 7.0.14, 7.2.7, 7.4.2 | 10.10.2023 |
SB2023101023 SB2023101024 SB2023101037 and 652 more |
Showing elements 101 - 120 out of 290