fortinet fortios vulnerabilities and exploits

(subscribe to this query)

An improper validation of integrity check value vulnerability [CWE-354] in FortiOS 7.2.0 up to and including 7.2.3, 7.0.0 up to and including 7.0.12, 6.4 all versions, 6.2 all versions, 6.0 all versions and VMs may allow a local attacker with admin privileges to boot a malicious ...

Fortinet Fortios Fortinet Fortios 7.2.3 Fortinet Fortios 7.2.2 Fortinet Fortios 7.2.1 Fortinet Fortios 7.2.0 Fortinet Fortios 7.0.12 Fortinet Fortios 7.0.11 Fortinet Fortios 7.0.10 Fortinet Fortios 7.0.9 Fortinet Fortios 7.0.8 Fortinet Fortios 7.0.7 Fortinet Fortios 7.0.6

A storing passwords in a recoverable format in Fortinet FortiOS versions 7.2.0 up to and including 7.2.1 allows malicious user to information disclosure via modification of LDAP server IP to point to a malicious server.

Fortinet Fortios 7.4.7 Fortinet Fortios 7.4.6 Fortinet Fortios 7.4.5 Fortinet Fortios 7.4.4 Fortinet Fortios 7.4.3 Fortinet Fortios 7.4.2 Fortinet Fortios 7.4.1 Fortinet Fortios 7.4.0 Fortinet Fortios 7.2.11 Fortinet Fortios 7.2.10 Fortinet Fortios 7.2.9 Fortinet Fortios 7.2.8

An origin validation error [CWE-346] vulnerability in Fortinet FortiOS IPSec VPN version 7.4.0 up to and including 7.4.1 and version 7.2.6 and below allows an authenticated IPSec VPN user with dynamic IP addressing to send (but not receive) packets spoofing the IP of another user...

Fortinet Fortios 7.4.1 Fortinet Fortios 7.4.0 Fortinet Fortios 7.2.10 Fortinet Fortios 7.2.9 Fortinet Fortios 7.2.8 Fortinet Fortios 7.2.7 Fortinet Fortios 7.2.6 Fortinet Fortios 7.2.5 Fortinet Fortios 7.2.4 Fortinet Fortios 7.2.3 Fortinet Fortios 7.2.2 Fortinet Fortios 7.2.1

An information disclosure vulnerability in Fortinet FortiOS 5.6.0, 5.4.4 and below versions allows malicious user to get FortiOS version info by inspecting FortiOS IKE VendorID packets.

Fortinet Fortios 5.0.0 Fortinet Fortios 5.0.1 Fortinet Fortios 5.0.2 Fortinet Fortios 5.0.3 Fortinet Fortios 5.0.4 Fortinet Fortios 5.0.5 Fortinet Fortios 5.0.6 Fortinet Fortios 5.0.7 Fortinet Fortios 5.0.8 Fortinet Fortios 5.0.9 Fortinet Fortios 5.0.10 Fortinet Fortios 5.0.11

A null pointer dereference in FortiOS versions 7.4.0 up to and including 7.4.1, 7.2.0 up to and including 7.2.5, 7.0 all versions, 6.4 all versions , 6.2 all versions and 6.0 all versions allows malicious user to trigger a denial of service via a crafted http request.

Fortinet Fortios 7.4.1 Fortinet Fortios 7.4.0 Fortinet Fortios 7.2.5 Fortinet Fortios 7.2.4 Fortinet Fortios 7.2.3 Fortinet Fortios 7.2.2 Fortinet Fortios 7.2.1 Fortinet Fortios 7.2.0 Fortinet Fortios 7.0.16 Fortinet Fortios 7.0.15 Fortinet Fortios 7.0.14 Fortinet Fortios 7.0.13

A null pointer dereference in FortiOS versions 7.4.0 up to and including 7.4.1, 7.2.0 up to and including 7.2.5, 7.0 all versions, 6.4 all versions , 6.2 all versions and 6.0 all versions allows malicious user to trigger a denial of service via a crafted http request.

Fortinet Fortios 7.4.1 Fortinet Fortios 7.4.0 Fortinet Fortios 7.2.5 Fortinet Fortios 7.2.4 Fortinet Fortios 7.2.3 Fortinet Fortios 7.2.2 Fortinet Fortios 7.2.1 Fortinet Fortios 7.2.0 Fortinet Fortios 7.0.16 Fortinet Fortios 7.0.15 Fortinet Fortios 7.0.14 Fortinet Fortios 7.0.13

An out-of-bounds read vulnerability [CWE-125] in FortiOS SSLVPN web portal versions 7.4.0 up to and including 7.4.4, versions 7.2.0 up to and including 7.2.8, 7.0 all verisons, and 6.4 all versions may allow an authenticated malicious user to perform a denial of service on the SS...

Fortinet Fortios 7.4.4 Fortinet Fortios 7.4.3 Fortinet Fortios 7.4.2 Fortinet Fortios 7.4.1 Fortinet Fortios 7.4.0 Fortinet Fortios 7.2.8 Fortinet Fortios 7.2.7 Fortinet Fortios 7.2.6 Fortinet Fortios 7.2.5 Fortinet Fortios 7.2.4 Fortinet Fortios 7.2.3 Fortinet Fortios 7.2.2

Long lived sessions in Fortinet FortiGate devices with FortiOS 5.x prior to 5.4.0 could violate a security policy during IPS signature updates when the FortiGate's IPSengine is configured in flow mode. All FortiGate versions with IPS configured in proxy mode (the default mod...

Fortinet Fortios 5.0.0 Fortinet Fortios 5.0.1 Fortinet Fortios 5.0.2 Fortinet Fortios 5.0.3 Fortinet Fortios 5.0.4 Fortinet Fortios 5.0.5 Fortinet Fortios 5.0.6 Fortinet Fortios 5.0.7 Fortinet Fortios 5.0.8 Fortinet Fortios 5.0.9 Fortinet Fortios 5.0.10 Fortinet Fortios 5.0.11

A stored XSS (Cross-Site-Scripting) vulnerability in Fortinet FortiOS allows malicious users to execute unauthorized code or commands via the policy global-label parameter.

Fortinet Fortios 5.0.0 Fortinet Fortios 5.0.1 Fortinet Fortios 5.0.2 Fortinet Fortios 5.0.3 Fortinet Fortios 5.0.4 Fortinet Fortios 5.0.5 Fortinet Fortios 5.0.6 Fortinet Fortios 5.0.7 Fortinet Fortios 5.0.8 Fortinet Fortios 5.0.9 Fortinet Fortios 5.0.10 Fortinet Fortios 5.0.11

An allocation of resources without limits or throttling vulnerability [CWE-770] in FortiOS versions 7.4.0 up to and including 7.4.4, versions 7.2.0 up to and including 7.2.8, versions 7.0.0 up to and including 7.0.15, and versions 6.4.0 up to and including 6.4.15 may allow an una...

Fortinet Fortios 7.4.4 Fortinet Fortios 7.4.3 Fortinet Fortios 7.4.2 Fortinet Fortios 7.4.1 Fortinet Fortios 7.4.0 Fortinet Fortios 7.2.8 Fortinet Fortios 7.2.7 Fortinet Fortios 7.2.6 Fortinet Fortios 7.2.5 Fortinet Fortios 7.2.4 Fortinet Fortios 7.2.3 Fortinet Fortios 7.2.2

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook