Known vulnerabilities in FortiOS - page 6
Vendor:
Fortinet, Inc
Software:
FortiOS
Software CPE:
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
Website:
https://www.fortinet.com/
Total vulnerabilities:
286
Public exploits:
24
Known exploited (KEV):
21
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
7.6.7
7.4.12
7.4.10
7.0.19
7.2.13
7.4.11
7.6.6
6.4.17
7.6.5
7.0.18
7.4.9
7.6.4
7.2.12
7.4.8
7.6.3
6.2.17
6.4.16
7.2.11
7.6.2
7.4.7
7.0.17
7.4.6
7.6.1
7.6.0
7.4.5
7.0.16
7.2.10
7.2.9
7.4.4
7.0.15
7.2.8
6.0.18
7.4.3
6.4.15
7.0.14
6.2.16
7.2.7
7.4.2
7.0.13
7.4.1
7.2.6
6.4.14
7.0.12
6.0.17
6.2.15
7.2.5
6.2.14
6.4.13
7.0.11
7.4.0
7.0.10
6.2.13
6.4.12
7.2.4
6.0.16
7.0.9
7.2.3
6.2.12
6.4.11
7.0.8
7.0.7
7.2.2
6.4.10
7.2.1
6.0.15
6.2.11
7.0.6
6.4.9
7.2.0
7.0.5
7.0.4
6.0.14
6.4.8
7.0.3
5.6.14
6.2.10
7.0.2
6.2.9
6.2.8
6.4.7
6.0.13
7.0.1
7.0.0
6.4.6
6.4.5
6.4.4
6.4.3
5.4.13
6.0.12
6.0.8
6.2.7
6.2.6
6.4.2
6.0.11
5.6.13
5.6.12
6.2.5
4.3.17
6.0.9
6.4.0
6.4.1
6.0.10
6.2.4
6.2.3
6.0.7
5.6.11
5.6.10
5.4.12
5.2.15
5.2.14
6.2.2
6.2.1
6.0.6
6.2.0
6.0.5
6.0.4
5.6.9
5.6.8
5.6.7
5.6.6
5.6.5
5.4.11
5.4.10
5.0.14
6.0.3
6.0.2
5.6.4
6.0.1
6.0.0
5.4.9
5.4.8
5.4.7
5.2.13
5.6.3
5.4.6
5.2.12
5.6.2
5.6.1
5.6.0
5.4.5
5.4.4
5.4.3
5.2.11
5.4.2
5.4.1
5.2.4
5.2.10
5.2.9
5.2.8
5.2.7
5.2.6
5.4
4.3.16
5.2.5
4.3.13
4.3.14
4.3.15
4.3.12
4.3.10
5.0
3.0
2.36
2.5 0mr4
3.0 beta
2.80
2.50 mr5
2.50
3.0 mr1
3 beta
2.8 mr10
4.3.9
4.3.8
4.3.7
4.3.6
4.3.5
4.3.4
4.3.3
4.3.2
4.3.1
4.3.0
4.2.13
4.2.12
4.2.11
4.2.10
4.2.9
4.2.8
4.2.7
4.2.6
4.2.5
4.2.4
4.2.3
4.2.2
4.2.1
4.2.0
4.1.11
4.1.10
4.1.9
4.1.8
4.1.7
4.1.6
4.1.5
4.1.4
4.1.3
4.1.2
4.1.1
4.1.0
5.4.0
5.2.3
5.2.2
5.2.1
5.2.0
5.0.13
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
5.0.0
Vulnerabilities (286)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU89565 - Improper Check for Unusual or Exceptional Conditions CVE-2024-26007 |
CWE-754 | Medium | 7.4.2 | 15.05.2024 |
SB2024051536 |
||
| #VU88235 - Exposure of sensitive information to an unauthorized actor CVE-2024-23662 |
CWE-200 | Medium | 7.2.6, 7.4.2 | 09.04.2024 |
SB2024040956 |
||
| #VU88234 - Use of Externally-Controlled Format String CVE-2023-48784 |
CWE-134 | Low | 7.2.8, 7.4.2 | 09.04.2024 |
SB2024040955 |
||
| #VU88233 - Insufficiently Protected Credentials CVE-2023-41677 |
CWE-522 | Medium | 6.2.16, 6.4.15, 7.0.13, 7.2.7, 7.4.2 | 09.04.2024 |
SB2024040954 |
||
| #VU87498 - Stack-based buffer overflow CVE-2023-42790 |
CWE-121 | High | 6.2.16, 6.4.15, 7.0.13, 7.2.6, 7.4.2 | 13.03.2024 |
SB2024031331 |
||
| #VU87497 - Out-of-bounds write CVE-2023-42789 |
CWE-787 | High | 6.2.16, 6.4.15, 7.0.13, 7.2.6, 7.4.2 | 13.03.2024 |
SB2024031331 |
||
| #VU87375 - Improper Authentication CVE-2023-46717 |
CWE-287 | Low | 7.0.13, 7.2.7, 7.4.2 | 12.03.2024 |
SB20240312316 |
||
| #VU87358 - Authorization Bypass Through User-Controlled Key CVE-2024-23112 |
CWE-639 | Low | 6.4.15, 7.0.14, 7.2.7, 7.4.2 | 12.03.2024 |
SB20240312305 |
||
| #VU86280 - Improper Certificate Validation CVE-2023-47537 |
CWE-295 | Medium | 7.2.7, 7.4.2 | 09.02.2024 |
SB2024020903 SB2024031338 |
||
| #VU86279 - Use of Externally-Controlled Format String CVE-2024-23113 |
CWE-134 | High | 7.0.14, 7.2.7, 7.4.3 | 09.02.2024 |
SB2024020902 SB2024031338 |
||
| #VU86278 - Out-of-bounds write CVE-2024-21762 |
CWE-787 | Critical | 6.2.16, 6.4.15, 7.0.14, 7.2.7, 7.4.3 | 09.02.2024 |
SB2024020901 SB2024031338 |
||
| #VU85208 - Improper Privilege Management CVE-2023-44250 |
CWE-269 | Medium | 7.2.6, 7.4.2 | 09.01.2024 |
SB2024010969 SB2024031338 |
||
| #VU84440 - Double Free CVE-2023-41678 |
CWE-415 | Medium | 7.0.6 | 14.12.2023 |
SB2023121477 |
||
| #VU84439 - Use of Externally-Controlled Format String CVE-2023-36639 |
CWE-134 | Medium | 6.2.16, 6.4.13, 7.0.12, 7.2.5, 7.4.1 | 14.12.2023 |
SB2023121476 SB2024031818 |
||
| #VU84435 - Improper Access Control CVE-2023-47536 |
CWE-284 | Low | 7.2.1 | 14.12.2023 |
SB2023121449 |
||
| #VU83247 - NULL Pointer Dereference CVE-2023-36641 |
CWE-476 | Medium | 7.0.13, 7.2.6, 7.4.1 | 17.11.2023 |
SB2023111732 SB2024031818 |
||
| #VU83246 - Improper Validation of Integrity Check Value CVE-2023-28002 |
CWE-354 | Low | 7.0.13, 7.2.4, 7.4.0 | 17.11.2023 |
SB2023111731 SB2024031818 |
||
| #VU81865 - Heap-based Buffer Overflow CVE-2023-38545 |
CWE-122 | High | 7.2.7, 7.4.2 | 11.10.2023 |
SB2023101129 SB2023101135 SB2023101149 and 99 more |
||
| #VU81863 - External Control of File Name or Path CVE-2023-38546 |
CWE-73 | Low | 7.2.7, 7.4.2 | 11.10.2023 |
SB2023101129 SB2023101135 SB2023101149 and 125 more |
||
| #VU81728 - Resource exhaustion CVE-2023-44487 |
CWE-400 | High | 7.0.14, 7.2.7, 7.4.2 | 10.10.2023 |
SB2023101023 SB2023101024 SB2023101037 and 648 more |
Showing elements 101 - 120 out of 286