Fortinet

Fortios

236 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2023-33307

  • EPSS 0.07%
  • Veröffentlicht 16.06.2023 10:15:09
  • Zuletzt bearbeitet 21.11.2024 08:05:22

A null pointer dereference in Fortinet FortiOS before 7.2.5 and before 7.0.11, FortiProxy before 7.2.3 and before 7.0.9 allows attacker to denial of sslvpn service via specifically crafted request in network parameter.

6.5

CVE-2023-33305

  • EPSS 0.14%
  • Veröffentlicht 13.06.2023 09:15:18
  • Zuletzt bearbeitet 21.11.2024 08:05:22

A loop with unreachable exit condition ('infinite loop') in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS version 7.0.0 through 7.0.10, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiProxy version 7.2.0 th...

4.8

CVE-2023-29175

  • EPSS 0.09%
  • Veröffentlicht 13.06.2023 09:15:17
  • Zuletzt bearbeitet 21.11.2024 07:56:39

An improper certificate validation vulnerability [CWE-295] in FortiOS 6.2 all versions, 6.4 all versions, 7.0.0 through 7.0.10, 7.2.0 and FortiProxy 1.2 all versions, 2.0 all versions, 7.0.0 through 7.0.9, 7.2.0 through 7.2.3 may allow a remote and u...

4.3

CVE-2023-29178

  • EPSS 0.13%
  • Veröffentlicht 13.06.2023 09:15:17
  • Zuletzt bearbeitet 21.11.2024 07:56:39

A access of uninitialized pointer vulnerability [CWE-824] in Fortinet FortiProxy version 7.2.0 through 7.2.3 and before 7.0.9 and FortiOS version 7.2.0 through 7.2.4 and before 7.0.11 allows an authenticated attacker to repetitively crash the httpsd...

7.8

CVE-2022-43953

  • EPSS 0.04%
  • Veröffentlicht 13.06.2023 09:15:16
  • Zuletzt bearbeitet 21.11.2024 07:27:24

A use of externally-controlled format string in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS all versions 7.0, FortiOS all versions 6.4, FortiOS all versions 6.2, FortiProxy version 7.2.0 through 7.2.1, FortiProxy version 7.0.0 through 7.0.7...

7.8

CVE-2023-22639

  • EPSS 0.04%
  • Veröffentlicht 13.06.2023 09:15:16
  • Zuletzt bearbeitet 21.11.2024 07:45:06

A out-of-bounds write in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0 through 7.0.10, FortiOS version 6.4.0 through 6.4.12, FortiOS all versions 6.2, FortiOS all versions 6.0, FortiProxy version 7.2.0 through 7.2.2, FortiProxy ...

6.5

CVE-2023-26207

  • EPSS 0.19%
  • Veröffentlicht 13.06.2023 09:15:16
  • Zuletzt bearbeitet 21.11.2024 07:50:55

An insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4 and FortiProxy 7.0.0 through 7.0.10. 7.2.0 through 7.2.1 allows an attacker to read certain passwords in plain text.

9.8

CVE-2023-27997

Warnung Medienbericht
  • EPSS 90.23%
  • Veröffentlicht 13.06.2023 09:15:16
  • Zuletzt bearbeitet 10.03.2025 20:40:57

A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6.4.12 and below, version 6.0.16 and below and FortiProxy version 7.2.3 and below, version 7.0.9 and below, version 2.0.12 and ...

2.7

CVE-2022-42474

  • EPSS 0.2%
  • Veröffentlicht 13.06.2023 09:15:15
  • Zuletzt bearbeitet 21.11.2024 07:25:02

A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.9 and before 6.4.12, FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.7, FortiSwitchManager version 7.2.0 through ...

4.4

CVE-2022-41327

  • EPSS 0.02%
  • Veröffentlicht 13.06.2023 09:15:14
  • Zuletzt bearbeitet 21.11.2024 07:23:03

A cleartext transmission of sensitive information vulnerability [CWE-319] in Fortinet FortiOS version 7.2.0 through 7.2.4, 7.0.0 through 7.0.8, FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.8 allows an authenticated attacker with reado...