Known vulnerabilities in FortiOS - page 8

Software: FortiOS
Software CPE: cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
Total vulnerabilities: 290
Public exploits: 24
Known exploited (KEV): 22
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiOS FortiOS is affected by 290 known vulnerabilities: 13 critical, 33 high, 108 medium, 136 low Critical High Medium Low

Vulnerabilities (290)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77181 - Improper Certificate Validation
CVE-2023-29175
CWE-295 Medium
No
No
7.0.11, 7.2.1 13.06.2023 SB2023061316
SB2024031818
#VU77180 - Out-of-bounds write
CVE-2023-22639
CWE-787 Low
No
No
6.4.13, 7.0.11, 7.2.4 13.06.2023 SB2023061315
SB2024031818
#VU77179 - Access of Uninitialized Pointer
CVE-2023-29178
CWE-824 Low
No
No
7.0.12, 7.2.5 13.06.2023 SB2023061314
SB2024031818
#VU77178 - NULL Pointer Dereference
CVE-2023-29180
CWE-476 Medium
No
No
6.0.17, 6.2.15, 6.4.13, 7.2.5 13.06.2023 SB2023061312
SB2024031818
#VU77177 - Use of Externally-Controlled Format String
CVE-2023-29181
CWE-134 Medium
No
No
6.2.15, 6.4.13, 7.0.12, 7.2.5 13.06.2023 SB2023061312
SB2024031818
#VU77176 - NULL Pointer Dereference
CVE-2023-29179
CWE-476 Medium
No
No
6.4.13, 7.0.12, 7.2.5 13.06.2023 SB2023061312
SB2024031818
#VU77175 - Heap-based Buffer Overflow
CVE-2023-27997
CWE-122 Critical
Available
Exploited
6.0.17, 6.2.14, 6.2.15, 6.4.13, 7.0.12, 7.2.5 13.06.2023 SB2023061310
SB2024031818
#VU75734 - Out-of-bounds write
CVE-2023-22640
CWE-787 High
No
No
6.2.14, 6.4.12, 7.0.11, 7.2.4 04.05.2023 SB2023050443
SB2024031818
#VU74859 - Permissions, Privileges, and Access Controls
CVE-2022-42469
CWE-264 Medium
No
No
7.0.11, 7.2.4 11.04.2023 SB2023041142
SB2024031818
#VU74858 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-41330
CWE-79 Medium
No
No
6.2.13, 6.4.12, 7.0.10, 7.2.4 11.04.2023 SB2023041141
SB2024031818
#VU74856 - Improper Restriction of Excessive Authentication Attempts
CVE-2022-43947
CWE-307 Medium
No
No
6.4.13, 7.0.11, 7.2.4 11.04.2023 SB2023041140
SB2024031818
#VU74852 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-22641
CWE-601 Low
No
No
6.4.13, 7.0.10, 7.2.4 11.04.2023 SB2023041139
SB2024031818
#VU73208 - Improper Access Control
CVE-2022-41329
CWE-284 Medium
No
No
6.4.12, 7.0.10, 7.2.4 09.03.2023 SB2023030933
SB2024031818
#VU73207 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-42476
CWE-22 Low
No
No
6.2.13, 6.4.12, 7.0.8, 7.2.4 09.03.2023 SB2023030931
SB2024031818
#VU73201 - NULL Pointer Dereference
CVE-2022-45861
CWE-476 Medium
No
No
6.4.12, 7.0.10, 7.2.4 09.03.2023 SB2023030927
SB2024031818
#VU73200 - Buffer Underwrite ('Buffer Underflow')
CVE-2023-25610
CWE-124 High
Available
No
6.2.13, 6.4.12, 7.0.10, 7.2.4 09.03.2023 SB2023030926
SB2024031818
#VU73199 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-41328
CWE-22 High
No
Exploited
6.4.12, 7.0.10, 7.2.4 09.03.2023 SB2023030925
SB2024031818
#VU72351 - Cleartext Storage of Sensitive Information
CVE-2022-22302
CWE-312 Low
No
No
6.0.14, 6.2.10, 6.4.2 17.02.2023 SB2023021715
#VU72350 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-41334
CWE-79 Medium
No
No
7.0.8, 7.2.4 17.02.2023 SB2023021710
SB2024031818
#VU72344 - Improper Certificate Validation
CVE-2022-39948
CWE-295 Medium
No
No
7.0.8, 7.2.4 17.02.2023 SB2023021710
SB2023021713
SB2024031818


Showing elements 141 - 160 out of 290