Known vulnerabilities in FortiOS - page 7

Software: FortiOS
Software CPE: cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
Total vulnerabilities: 286
Public exploits: 24
Known exploited (KEV): 21
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiOS FortiOS is affected by 286 known vulnerabilities: 13 critical, 32 high, 106 medium, 135 low Critical High Medium Low

Vulnerabilities (286)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU87581 - NULL Pointer Dereference
CVE-2023-33307
CWE-476 Medium
No
No
6.4.13, 7.0.11, 7.2.5 18.03.2024 SB2023061647
SB2024031818
#VU81971 - Improper Authorization
CVE-2023-41841
CWE-285 Low
No
No
7.0.12, 7.2.5 12.10.2023 SB2023101282
SB2024031818
#VU81970 - Improper Access Control
CVE-2023-33301
CWE-284 Medium
No
No
7.2.5, 7.4.1 12.10.2023 SB2023101281
SB2024031818
#VU81969 - Exposure of sensitive information to an unauthorized actor
CVE-2023-37935
CWE-200 Low
No
No
7.0.13, 7.2.6, 7.4.1 12.10.2023 SB2023101280
SB2024031818
#VU81968 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-36555
CWE-79 Medium
No
No
7.2.6 12.10.2023 SB2023101279
SB2024031818
#VU81928 - Use After Free
CVE-2023-41675
CWE-416 Medium
No
No
7.0.11, 7.2.5 11.10.2023 SB2023101195
SB2024031818
#VU80761 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-29183
CWE-79 Medium
No
No
6.2.15, 6.4.13, 7.0.12, 7.2.5 13.09.2023 SB2023091362
SB2024031818
#VU79167 - Stack-based buffer overflow
CVE-2023-29182
CWE-121 Low
No
No
7.0.4, 7.2.0, 7.4.0 08.08.2023 SB2023080873
#VU78114 - Insufficient Session Expiration
CVE-2023-28001
CWE-613 Low
No
No
7.4.0 11.07.2023 SB2023071177
SB2024031818
#VU78112 - Stack-based buffer overflow
CVE-2023-33308
CWE-121 Critical
No
No
7.0.11, 7.2.4 11.07.2023 SB2023071176
SB2024031818
#VU77961 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-42474
CWE-22 Low
No
No
6.4.13, 7.0.10, 7.2.4, 7.4.0 05.07.2023 SB2023070507
SB2024031818
#VU77960 - Cleartext Transmission of Sensitive Information
CVE-2022-41327
CWE-319 Low
No
No
7.0.9, 7.2.5 05.07.2023 SB2023070506
SB2024031818
#VU77959 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-33305
CWE-835 Low
No
No
7.0.11, 7.2.5, 7.4.0 05.07.2023 SB2023070504
SB2024031818
#VU77494 - NULL Pointer Dereference
CVE-2023-33306
CWE-476 Medium
No
No
6.4.13, 7.0.11, 7.2.5 16.06.2023 SB2023061647
SB2024031818
#VU77183 - Information Exposure Through Log Files
CVE-2023-26207
CWE-532 Low
No
No
7.4.0 13.06.2023 SB2023061318
SB2024031818
#VU77182 - Use of Externally-Controlled Format String
CVE-2022-43953
CWE-134 Low
No
No
6.4.13, 7.0.12, 7.2.5 13.06.2023 SB2023061317
SB2024031818
#VU77181 - Improper Certificate Validation
CVE-2023-29175
CWE-295 Medium
No
No
7.0.11, 7.2.1 13.06.2023 SB2023061316
SB2024031818
#VU77180 - Out-of-bounds write
CVE-2023-22639
CWE-787 Low
No
No
6.4.13, 7.0.11, 7.2.4 13.06.2023 SB2023061315
SB2024031818
#VU77179 - Access of Uninitialized Pointer
CVE-2023-29178
CWE-824 Low
No
No
7.0.12, 7.2.5 13.06.2023 SB2023061314
SB2024031818
#VU77178 - NULL Pointer Dereference
CVE-2023-29180
CWE-476 Medium
No
No
6.0.17, 6.2.15, 6.4.13, 7.2.5 13.06.2023 SB2023061312
SB2024031818


Showing elements 121 - 140 out of 286