Known vulnerabilities in FortiOS - page 8

Software: FortiOS
Software CPE: cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
Total vulnerabilities: 286
Public exploits: 24
Known exploited (KEV): 21
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiOS FortiOS is affected by 286 known vulnerabilities: 13 critical, 32 high, 106 medium, 135 low Critical High Medium Low

Vulnerabilities (286)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77177 - Use of Externally-Controlled Format String
CVE-2023-29181
CWE-134 Medium
No
No
6.2.15, 6.4.13, 7.0.12, 7.2.5 13.06.2023 SB2023061312
SB2024031818
#VU77176 - NULL Pointer Dereference
CVE-2023-29179
CWE-476 Medium
No
No
6.4.13, 7.0.12, 7.2.5 13.06.2023 SB2023061312
SB2024031818
#VU77175 - Heap-based Buffer Overflow
CVE-2023-27997
CWE-122 Critical
Available
Exploited
6.0.17, 6.2.14, 6.2.15, 6.4.13, 7.0.12, 7.2.5 13.06.2023 SB2023061310
SB2024031818
#VU75734 - Out-of-bounds write
CVE-2023-22640
CWE-787 High
No
No
6.2.14, 6.4.12, 7.0.11, 7.2.4 04.05.2023 SB2023050443
SB2024031818
#VU74859 - Permissions, Privileges, and Access Controls
CVE-2022-42469
CWE-264 Medium
No
No
7.0.11, 7.2.4 11.04.2023 SB2023041142
SB2024031818
#VU74858 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-41330
CWE-79 Medium
No
No
6.2.13, 6.4.12, 7.0.10, 7.2.4 11.04.2023 SB2023041141
SB2024031818
#VU74856 - Improper Restriction of Excessive Authentication Attempts
CVE-2022-43947
CWE-307 Medium
No
No
6.4.13, 7.0.11, 7.2.4 11.04.2023 SB2023041140
SB2024031818
#VU74852 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-22641
CWE-601 Low
No
No
6.4.13, 7.0.10, 7.2.4 11.04.2023 SB2023041139
SB2024031818
#VU73208 - Improper Access Control
CVE-2022-41329
CWE-284 Medium
No
No
6.4.12, 7.0.10, 7.2.4 09.03.2023 SB2023030933
SB2024031818
#VU73207 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-42476
CWE-22 Low
No
No
6.2.13, 6.4.12, 7.0.8, 7.2.4 09.03.2023 SB2023030931
SB2024031818
#VU73201 - NULL Pointer Dereference
CVE-2022-45861
CWE-476 Medium
No
No
6.4.12, 7.0.10, 7.2.4 09.03.2023 SB2023030927
SB2024031818
#VU73200 - Buffer Underwrite ('Buffer Underflow')
CVE-2023-25610
CWE-124 High
Available
No
6.2.13, 6.4.12, 7.0.10, 7.2.4 09.03.2023 SB2023030926
SB2024031818
#VU73199 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-41328
CWE-22 High
No
Exploited
6.4.12, 7.0.10, 7.2.4 09.03.2023 SB2023030925
SB2024031818
#VU72351 - Cleartext Storage of Sensitive Information
CVE-2022-22302
CWE-312 Low
No
No
6.0.14, 6.2.10, 6.4.2 17.02.2023 SB2023021715
#VU72350 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-41334
CWE-79 Medium
No
No
7.0.8, 7.2.4 17.02.2023 SB2023021710
SB2024031818
#VU72349 - Missing Required Cryptographic Step
CVE-2022-29054
CWE-325 Low
No
No
7.0.8, 7.2.1 17.02.2023 SB2023021707
SB2023021711
#VU72348 - Improper Privilege Management
CVE-2022-38378
CWE-269 Low
No
No
7.0.8, 7.2.1 17.02.2023 SB2023021707
SB2023021711
#VU72347 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2022-42472
CWE-113 Low
No
No
7.0.9, 7.2.3 17.02.2023 SB2023021709
SB2023021711
#VU72345 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-41335
CWE-22 Medium
No
No
7.0.9, 7.2.3 17.02.2023 SB2023021709
SB2023021711
SB2023021712
#VU72344 - Improper Certificate Validation
CVE-2022-39948
CWE-295 Medium
No
No
7.0.8, 7.2.4 17.02.2023 SB2023021710
SB2023021713
SB2024031818


Showing elements 141 - 160 out of 286