Known vulnerabilities in FortiOS - page 9

Software: FortiOS
Software CPE: cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
Total vulnerabilities: 286
Public exploits: 24
Known exploited (KEV): 21
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiOS FortiOS is affected by 286 known vulnerabilities: 13 critical, 32 high, 106 medium, 135 low Critical High Medium Low

Vulnerabilities (286)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72346 - Improper Verification of Cryptographic Signature
CVE-2021-43074
CWE-347 Low
No
No
6.4.9, 7.0.7 17.02.2023 SB2023021703
SB2023021704
SB2023021705
and 1 more
#VU70120 - Heap-based Buffer Overflow
CVE-2022-42475
CWE-122 Critical
Available
Exploited
6.2.12, 6.4.11, 7.0.9, 7.2.3 12.12.2022 SB2022121216
#VU69939 - Improper Authentication
CVE-2022-35843
CWE-287 High
No
No
6.4.10, 7.0.8, 7.2.2 06.12.2022 SB2022120634
SB2022120635
#VU69936 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-40680
CWE-79 Low
No
No
6.4.10, 7.0.7, 7.2.2 06.12.2022 SB2022120630
#VU68929 - Insufficient Verification of Data Authenticity
CVE-2022-26122
CWE-345 Medium
No
No
7.0.8, 7.2.2 02.11.2022 SB2022110231
#VU68905 - Key Management Errors
CVE-2022-30307
CWE-320 Medium
No
No
6.4.10, 7.0.7, 7.2.1 01.11.2022 SB2022110149
#VU68904 - Exposure of sensitive information to an unauthorized actor
CVE-2022-35842
CWE-200 Medium
No
No
6.4.10, 7.0.7, 7.2.1 01.11.2022 SB2022110148
#VU68903 - Improper Access Control
CVE-2022-38380
CWE-284 Low
No
No
7.0.8, 7.2.1 01.11.2022 SB2022110147
#VU68100 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-44171
CWE-78 Low
No
No
6.0.15, 6.2.11, 6.4.9, 7.0.7 10.10.2022 SB2022101025
#VU68099 - NULL Pointer Dereference
CVE-2022-29055
CWE-476 Medium
No
No
6.0.15, 6.2.11, 6.4.10, 7.0.7, 7.2.2 10.10.2022 SB2022101024
#VU68070 - Authentication Bypass Using an Alternate Path or Channel
CVE-2022-40684
CWE-288 Critical
Available
Exploited
7.0.7, 7.2.2 08.10.2022 SB2022100806
SB2022101028
#VU67033 - Missing Required Cryptographic Step
CVE-2022-29053
CWE-325 Low
No
No
7.0.6, 7.2.1 06.09.2022 SB2022090657
#VU67032 - Improper Verification of Source of a Communication Channel
CVE-2022-27491
CWE-940 Medium
No
No
6.2.11, 6.4.9, 7.0.6, 7.2.1 06.09.2022 SB2022090655
#VU67031 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-43080
CWE-79 Low
No
No
6.4.10, 7.0.6, 7.2.1 06.09.2022 SB2022090656
#VU65981 - Use of Externally-Controlled Format String
CVE-2022-22299
CWE-134 Low
No
No
6.0.15, 6.2.11, 6.4.9, 7.0.4 02.08.2022 SB2022080233
SB2022080234
SB2022080235
and 1 more
#VU65980 - Improper Access Control
CVE-2022-23442
CWE-284 Low
No
No
6.4.9, 7.0.6 02.08.2022 SB2022080232
#VU64934 - Memory corruption
CVE-2021-43072
CWE-119 Low
No
No
6.2.11, 6.4.9, 7.0.6 05.07.2022 SB2022070525
SB2022070526
SB2022070527
and 1 more
#VU64933 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23438
CWE-79 Medium
No
No
7.0.6 05.07.2022 SB2022070524
#VU64930 - Integer overflow
CVE-2021-42755
CWE-190 Medium
No
No
6.4.9, 7.0.3 05.07.2022 SB2022070514
SB2022070515
SB2022070516
and 2 more
#VU64929 - Stack-based buffer overflow
CVE-2021-44170
CWE-121 Low
No
No
6.2.11, 6.4.9, 7.0.4 05.07.2022 SB2022070512
SB2022070513


Showing elements 161 - 180 out of 286