Fortinet

Fortios

254 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2025-53843

  • EPSS 0.02%
  • Veröffentlicht 18.11.2025 17:01:28
  • Zuletzt bearbeitet 21.11.2025 09:15:47

A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to execute unauthorized code or commands vi...

6

CVE-2025-54821

  • EPSS 0.02%
  • Veröffentlicht 18.11.2025 17:01:22
  • Zuletzt bearbeitet 20.11.2025 14:34:42

An Improper Privilege Management vulnerability [CWE-269] in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.6.0, FortiPAM 1.5 all versions, Forti...

7.5

CVE-2025-58413

  • EPSS 0.01%
  • Veröffentlicht 18.11.2025 17:01:22
  • Zuletzt bearbeitet 21.11.2025 09:15:47

A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiS...

4.3

CVE-2025-31514

  • EPSS 0.04%
  • Veröffentlicht 14.10.2025 15:23:52
  • Zuletzt bearbeitet 15.10.2025 17:17:03

An Insertion of Sensitive Information into Log File vulnerability [CWE-532] in FortiOS 7.6.0 through 7.6.3, 7.4 all versions, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an attacker with at least read-only privileges to retrieve se...

4.3

CVE-2025-54822

  • EPSS 0.03%
  • Veröffentlicht 14.10.2025 15:23:47
  • Zuletzt bearbeitet 15.10.2025 17:20:21

An improper authorization vulnerability [CWE-285] in Fortinet FortiOS version 7.4.0 through 7.4.1 and before 7.2.8 & Fortinet FortiProxy before version 7.4.8 allows an authenticated attacker to access static files of others VDOMs via crafted HTTP or ...

4.3

CVE-2025-25255

  • EPSS 0.05%
  • Veröffentlicht 14.10.2025 15:23:09
  • Zuletzt bearbeitet 16.10.2025 14:56:35

An Improperly Implemented Security Check for Standard vulnerability [CWE-358] in FortiProxy 7.6.0 through 7.6.3, 7.4 all versions, 7.2 all versions, 7.0.1 through 7.0.21, and FortiOS 7.6.0 through 7.6.3 explicit web proxy may allow an authenticated p...

6.5

CVE-2025-25252

  • EPSS 0.06%
  • Veröffentlicht 14.10.2025 15:23:08
  • Zuletzt bearbeitet 15.10.2025 17:33:12

An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL VPN 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4 all versions may allow a remote attacker (e.g. a former admin whose account was re...

5.3

CVE-2024-26008

  • EPSS 0.05%
  • Veröffentlicht 14.10.2025 15:23:04
  • Zuletzt bearbeitet 15.10.2025 17:39:47

An improper check or handling of exceptional conditions vulnerability [CWE-703] in FortiOS version 7.4.0 through 7.4.3 and before 7.2.7, FortiProxy version 7.4.0 through 7.4.3 and before 7.2.9, FortiPAM before 1.2.0 and FortiSwitchManager version 7.2...

4.3

CVE-2024-47569

  • EPSS 0.02%
  • Veröffentlicht 14.10.2025 15:23:03
  • Zuletzt bearbeitet 15.10.2025 17:36:57

A insertion of sensitive information into sent data in Fortinet FortiManager Cloud 7.4.1 through 7.4.3, FortiVoice 7.0.0 through 7.0.4, 6.4.0 through 6.4.9, 6.0.7 through 6.0.12, FortiMail 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.9...

7.8

CVE-2023-46718

  • EPSS 0.02%
  • Veröffentlicht 14.10.2025 15:23:02
  • Zuletzt bearbeitet 16.10.2025 13:01:25

A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.12 and 6.4.6 through 6.4.15 and 6.2.9 through 6.2.16 and 6.0.13 through 6.0.18 allows attacker to execute unauthorized code or...