Fortinet

Fortios

257 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.6

CVE-2024-47570

  • EPSS 0.04%
  • Veröffentlicht 09.12.2025 17:20:42
  • Zuletzt bearbeitet 10.12.2025 20:32:21

An insertion of sensitive information into log file vulnerability [CWE-532] in FortiOS 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0 all versions; FortiProxy 7.4.0 through 7.4.3, 7.2.0 through 7.2.11; FortiPAM 1.4 all versions, 1.3 all versions, 1.2 ...

9.8

CVE-2025-59718

Medienbericht
  • EPSS 0.09%
  • Veröffentlicht 09.12.2025 17:20:11
  • Zuletzt bearbeitet 09.12.2025 20:05:40

A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 throug...

5.6

CVE-2025-62631

  • EPSS 0.04%
  • Veröffentlicht 09.12.2025 17:18:47
  • Zuletzt bearbeitet 09.12.2025 20:29:11

An insufficient session expiration vulnerability [CWE-613] in Fortinet FortiOS 7.4.0, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to maintain access to network resources via an active SSLVPN session no...

7.5

CVE-2025-53843

  • EPSS 0.02%
  • Veröffentlicht 18.11.2025 17:01:28
  • Zuletzt bearbeitet 21.11.2025 09:15:47

A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to execute unauthorized code or commands vi...

6

CVE-2025-54821

  • EPSS 0.02%
  • Veröffentlicht 18.11.2025 17:01:22
  • Zuletzt bearbeitet 20.11.2025 14:34:42

An Improper Privilege Management vulnerability [CWE-269] in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.6.0, FortiPAM 1.5 all versions, Forti...

7.5

CVE-2025-58413

  • EPSS 0.01%
  • Veröffentlicht 18.11.2025 17:01:22
  • Zuletzt bearbeitet 21.11.2025 09:15:47

A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiS...

4.3

CVE-2025-31514

  • EPSS 0.04%
  • Veröffentlicht 14.10.2025 15:23:52
  • Zuletzt bearbeitet 15.10.2025 17:17:03

An Insertion of Sensitive Information into Log File vulnerability [CWE-532] in FortiOS 7.6.0 through 7.6.3, 7.4 all versions, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an attacker with at least read-only privileges to retrieve se...

4.3

CVE-2025-54822

  • EPSS 0.03%
  • Veröffentlicht 14.10.2025 15:23:47
  • Zuletzt bearbeitet 15.10.2025 17:20:21

An improper authorization vulnerability [CWE-285] in Fortinet FortiOS version 7.4.0 through 7.4.1 and before 7.2.8 & Fortinet FortiProxy before version 7.4.8 allows an authenticated attacker to access static files of others VDOMs via crafted HTTP or ...

4.3

CVE-2025-25255

  • EPSS 0.05%
  • Veröffentlicht 14.10.2025 15:23:09
  • Zuletzt bearbeitet 09.12.2025 18:15:49

An Improperly Implemented Security Check for Standard vulnerability [CWE-358] in Fortinet FortiOS 7.6.0 through 7.6.3, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.11, FortiProxy 7.2 all versions, FortiProxy 7.0.1 through 7.0.22 may a...

6.5

CVE-2025-25252

  • EPSS 0.06%
  • Veröffentlicht 14.10.2025 15:23:08
  • Zuletzt bearbeitet 15.10.2025 17:33:12

An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL VPN 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4 all versions may allow a remote attacker (e.g. a former admin whose account was re...