Fortinet

Fortios

236 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2019-5587

  • EPSS 0.1%
  • Published 04.06.2019 22:29:00
  • Last modified 21.11.2024 04:45:10

Lack of root file system integrity checking in Fortinet FortiOS VM application images all versions below 6.0.5 may allow attacker to implant malicious programs into the installing image by reassembling the image through specific methods.

6.1

CVE-2019-5588

  • EPSS 0.27%
  • Published 04.06.2019 22:29:00
  • Last modified 21.11.2024 04:45:11

A reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4 under SSL VPN web portal may allow an attacker to execute unauthorized malicious script code via the "err" parameter of the error process HTTP requests.

9.8

CVE-2018-13379

Warning
  • EPSS 94.47%
  • Published 04.06.2019 21:29:00
  • Last modified 27.01.2025 21:30:45

An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal all...

6.1

CVE-2018-13380

  • EPSS 37.93%
  • Published 04.06.2019 21:29:00
  • Last modified 21.11.2024 03:46:59

A Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4.0 to 5.4.12, 5.2 and below and Fortinet FortiProxy 2.0.0, 1.2.8 and below under SSL VPN web portal allows attacker to execute unauthorized malicious sc...

7.5

CVE-2018-13381

  • EPSS 0.54%
  • Published 04.06.2019 21:29:00
  • Last modified 21.11.2024 03:46:59

A buffer overflow vulnerability in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.7, 5.4 and earlier versions and FortiProxy 2.0.0, 1.2.8 and earlier versions under SSL VPN web portal allows a non-authenticated attacker to perform a Denial-o...

7.5

CVE-2018-13382

Warning
  • EPSS 87.79%
  • Published 04.06.2019 21:29:00
  • Last modified 27.01.2025 21:30:41

An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5.4.1 to 5.4.10 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to modify ...

6.1

CVE-2018-13384

  • EPSS 0.36%
  • Published 04.06.2019 21:29:00
  • Last modified 21.11.2024 03:46:59

A Host Header Redirection vulnerability in Fortinet FortiOS all versions below 6.0.5 under SSL VPN web portal allows a remote attacker to potentially poison HTTP cache and subsequently redirect SSL VPN web portal users to arbitrary web domains.

5.3

CVE-2018-13365

  • EPSS 0.24%
  • Published 29.05.2019 21:29:00
  • Last modified 21.11.2024 03:46:58

An Information Exposure vulnerability in Fortinet FortiOS 6.0.1, 5.6.5 and below, allow attackers to learn private IP as well as the hostname of FortiGate via Application Control Block page.

6.5

CVE-2018-13383

Warning
  • EPSS 1.12%
  • Published 29.05.2019 18:29:00
  • Last modified 27.01.2025 21:30:37

A heap buffer overflow in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.10, 5.4.0 through 5.4.12, 5.2.14 and earlier and FortiProxy 2.0.0, 1.2.8 and earlier in the SSL VPN web portal may cause the SSL VPN web service termination for logged ...

5.3

CVE-2018-13366

  • EPSS 0.24%
  • Published 09.04.2019 17:29:00
  • Last modified 21.11.2024 03:46:58

An information disclosure vulnerability in Fortinet FortiOS 6.0.1, 5.6.7 and below allows attacker to reveals serial number of FortiGate via hostname field defined in connection control setup packets of PPTP protocol.