Known vulnerabilities in FortiOS - page 7

Software: FortiOS
Software CPE: cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
Total vulnerabilities: 290
Public exploits: 24
Known exploited (KEV): 22
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiOS FortiOS is affected by 290 known vulnerabilities: 13 critical, 33 high, 108 medium, 136 low Critical High Medium Low

Vulnerabilities (290)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU87581 - NULL Pointer Dereference
CVE-2023-33307
CWE-476 Medium
No
No
6.4.13, 7.0.11, 7.2.5 18.03.2024 SB2023061647
SB2024031818
#VU83247 - NULL Pointer Dereference
CVE-2023-36641
CWE-476 Medium
No
No
7.0.13, 7.2.6, 7.4.1 17.11.2023 SB2023111732
SB2024031818
#VU83246 - Improper Validation of Integrity Check Value
CVE-2023-28002
CWE-354 Low
No
No
7.0.13, 7.2.4, 7.4.0 17.11.2023 SB2023111731
SB2024031818
#VU81971 - Improper Authorization
CVE-2023-41841
CWE-285 Low
No
No
7.0.12, 7.2.5 12.10.2023 SB2023101282
SB2024031818
#VU81970 - Improper Access Control
CVE-2023-33301
CWE-284 Medium
No
No
7.2.5, 7.4.1 12.10.2023 SB2023101281
SB2024031818
#VU81969 - Exposure of sensitive information to an unauthorized actor
CVE-2023-37935
CWE-200 Low
No
No
7.0.13, 7.2.6, 7.4.1 12.10.2023 SB2023101280
SB2024031818
#VU81968 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-36555
CWE-79 Medium
No
No
7.2.6 12.10.2023 SB2023101279
SB2024031818
#VU81928 - Use After Free
CVE-2023-41675
CWE-416 Medium
No
No
7.0.11, 7.2.5 11.10.2023 SB2023101195
SB2024031818
#VU81865 - Heap-based Buffer Overflow
CVE-2023-38545
CWE-122 High
Available
No
7.2.7, 7.4.2 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 99 more
#VU81863 - External Control of File Name or Path
CVE-2023-38546
CWE-73 Low
No
No
7.2.7, 7.4.2 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 125 more
#VU80761 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-29183
CWE-79 Medium
No
No
6.2.15, 6.4.13, 7.0.12, 7.2.5 13.09.2023 SB2023091362
SB2024031818
#VU79167 - Stack-based buffer overflow
CVE-2023-29182
CWE-121 Low
No
No
7.0.4, 7.2.0, 7.4.0 08.08.2023 SB2023080873
#VU78114 - Insufficient Session Expiration
CVE-2023-28001
CWE-613 Low
No
No
7.4.0 11.07.2023 SB2023071177
SB2024031818
#VU78112 - Stack-based buffer overflow
CVE-2023-33308
CWE-121 Critical
No
No
7.0.11, 7.2.4 11.07.2023 SB2023071176
SB2024031818
#VU77961 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-42474
CWE-22 Low
No
No
6.4.13, 7.0.10, 7.2.4, 7.4.0 05.07.2023 SB2023070507
SB2024031818
#VU77960 - Cleartext Transmission of Sensitive Information
CVE-2022-41327
CWE-319 Low
No
No
7.0.9, 7.2.5 05.07.2023 SB2023070506
SB2024031818
#VU77959 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-33305
CWE-835 Low
No
No
7.0.11, 7.2.5, 7.4.0 05.07.2023 SB2023070504
SB2024031818
#VU77494 - NULL Pointer Dereference
CVE-2023-33306
CWE-476 Medium
No
No
6.4.13, 7.0.11, 7.2.5 16.06.2023 SB2023061647
SB2024031818
#VU77183 - Information Exposure Through Log Files
CVE-2023-26207
CWE-532 Low
No
No
7.4.0 13.06.2023 SB2023061318
SB2024031818
#VU77182 - Use of Externally-Controlled Format String
CVE-2022-43953
CWE-134 Low
No
No
6.4.13, 7.0.12, 7.2.5 13.06.2023 SB2023061317
SB2024031818


Showing elements 121 - 140 out of 290