Fortinet

Fortios

236 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.8

CVE-2024-23111

  • EPSS 0.14%
  • Published 11.06.2024 15:16:03
  • Last modified 21.11.2024 08:56:57

An improper neutralization of input during web page Generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiOS version 7.4.3 and below, 7.2 all versions, 7.0 all versions and FortiProxy version 7.4.2 and below, 7.2 all versions, 7.0 all ve...

7.8

CVE-2023-46720

  • EPSS 0.05%
  • Published 11.06.2024 15:15:55
  • Last modified 21.11.2024 08:29:08

A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.12 and 6.4.6 through 6.4.15 and 6.2.9 through 6.2.16 and 6.0.13 through 6.0.18 allows attacker to execute unauthorized code or...

7.5

CVE-2024-26007

  • EPSS 0.25%
  • Published 14.05.2024 17:15:40
  • Last modified 11.12.2024 19:55:59

An improper check or handling of exceptional conditions vulnerability [CWE-703] in Fortinet FortiOS version 7.4.1 allows an unauthenticated attacker to provoke a denial of service on the administrative interface via crafted HTTP requests.

7.2

CVE-2023-46714

  • EPSS 0.18%
  • Published 14.05.2024 17:15:25
  • Last modified 21.11.2024 08:29:08

A stack-based buffer overflow [CWE-121] vulnerability in Fortinet FortiOS version 7.2.1 through 7.2.6 and version 7.4.0 through 7.4.1 allows a privileged attacker over the administrative interface to execute arbitrary code or commands via crafted HTT...

5

CVE-2023-45586

  • EPSS 0.22%
  • Published 14.05.2024 17:15:24
  • Last modified 21.11.2024 08:27:00

An insufficient verification of data authenticity vulnerability [CWE-345] in Fortinet FortiOS SSL-VPN tunnel mode version 7.4.0 through 7.4.1, version 7.2.0 through 7.2.7 and before 7.0.12 & FortiProxy SSL-VPN tunnel mode version 7.4.0 through 7.4.1,...

7.2

CVE-2023-45583

  • EPSS 0.21%
  • Published 14.05.2024 17:15:22
  • Last modified 21.11.2024 08:27:00

A use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.5, 7.0.0 through 7.0.11, 2.0.0 through 2.0.13, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6 FortiPAM versions 1.1.0, 1.0.0 through 1.0.3 FortiOS versions 7.4....

7.2

CVE-2023-44247

  • EPSS 0.19%
  • Published 14.05.2024 17:15:20
  • Last modified 21.11.2024 08:25:30

A double free vulnerability [CWE-415] in Fortinet FortiOS before 7.0.0 may allow a privileged attacker to execute code or commands via crafted HTTP or HTTPs requests.

6.7

CVE-2023-36640

  • EPSS 0.09%
  • Published 14.05.2024 17:15:16
  • Last modified 21.11.2024 08:10:09

A use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.4, 7.0.0 through 7.0.10, 2.0.0 through 2.0.13, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7, FortiPAM versions 1.0.0 through 1.0.3, Forti...

7.5

CVE-2024-23662

  • EPSS 0.37%
  • Published 09.04.2024 15:15:31
  • Last modified 11.12.2024 19:11:44

An exposure of sensitive information to an unauthorized actor in Fortinet FortiOS at least version at least 7.4.0 through 7.4.1 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.15 and 6.4.0 through 6.4.15 allows attacker to information disclosure via HT...

6.7

CVE-2023-48784

  • EPSS 0.08%
  • Published 09.04.2024 15:15:28
  • Last modified 17.01.2025 17:19:51

A use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.1 and below, version 7.2.7 and below, 7.0 all versions, 6.4 all versions command line interface may allow a local privileged attacker with super-admin profile...