Fortinet

FortiOS

282 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2022-43953

  • EPSS 0.25%
  • Veröffentlicht 13.06.2023 09:15:16
  • Zuletzt bearbeitet 21.11.2024 07:27:24

A use of externally-controlled format string in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS all versions 7.0, FortiOS all versions 6.4, FortiOS all versions 6.2, FortiProxy version 7.2.0 through 7.2.1, FortiProxy version 7.0.0 through 7.0.7...

7.8

CVE-2023-22639

  • EPSS 0.19%
  • Veröffentlicht 13.06.2023 09:15:16
  • Zuletzt bearbeitet 21.11.2024 07:45:06

A out-of-bounds write in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0 through 7.0.10, FortiOS version 6.4.0 through 6.4.12, FortiOS all versions 6.2, FortiOS all versions 6.0, FortiProxy version 7.2.0 through 7.2.2, FortiProxy ...

6.5

CVE-2023-26207

  • EPSS 0.5%
  • Veröffentlicht 13.06.2023 09:15:16
  • Zuletzt bearbeitet 21.11.2024 07:50:55

An insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4 and FortiProxy 7.0.0 through 7.0.10. 7.2.0 through 7.2.1 allows an attacker to read certain passwords in plain text.

9.8

CVE-2023-27997

Warnung Medienbericht
  • EPSS 85.69%
  • Veröffentlicht 13.06.2023 09:15:16
  • Zuletzt bearbeitet 31.07.2026 04:16:43

A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6.4.12 and below, version 6.0.16 and below and FortiProxy version 7.2.3 and below, version 7.0.9 and below, version 2.0.12 and ...

2.7

CVE-2022-42474

  • EPSS 0.64%
  • Veröffentlicht 13.06.2023 09:15:15
  • Zuletzt bearbeitet 21.11.2024 07:25:02

A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.9 and before 6.4.12, FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.7, FortiSwitchManager version 7.2.0 through ...

4.4

CVE-2022-41327

  • EPSS 0.13%
  • Veröffentlicht 13.06.2023 09:15:14
  • Zuletzt bearbeitet 21.11.2024 07:23:03

A cleartext transmission of sensitive information vulnerability [CWE-319] in Fortinet FortiOS version 7.2.0 through 7.2.4, 7.0.0 through 7.0.8, FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.8 allows an authenticated attacker with reado...

8.8

CVE-2023-22640

  • EPSS 0.89%
  • Veröffentlicht 03.05.2023 22:15:17
  • Zuletzt bearbeitet 21.11.2024 07:45:06

A out-of-bounds write in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0 through 7.0.10, FortiOS version 6.4.0 through 6.4.11, FortiOS version 6.2.0 through 6.2.13, FortiOS all versions 6.0, FortiProxy version 7.2.0 through 7.2.1...

5.4

CVE-2023-22641

  • EPSS 0.3%
  • Veröffentlicht 11.04.2023 17:15:08
  • Zuletzt bearbeitet 21.11.2024 07:45:06

A url redirection to untrusted site ('open redirect') in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0 through 7.0.9, FortiOS versions 6.4.0 through 6.4.12, FortiOS all versions 6.2, FortiOS all versions 6.0, FortiProxy version ...

6.1

CVE-2022-41330

  • EPSS 0.65%
  • Veröffentlicht 11.04.2023 17:15:07
  • Zuletzt bearbeitet 21.11.2024 07:23:04

An improper neutralization of input during web page generation vulnerability ('Cross-site Scripting') [CWE-79] in Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.9, version 6.4.0 through 6.4.11 and before 6.2.12 and FortiProxy...

4.3

CVE-2022-42469

  • EPSS 0.44%
  • Veröffentlicht 11.04.2023 17:15:07
  • Zuletzt bearbeitet 21.11.2024 07:25:01

A permissive list of allowed inputs vulnerability [CWE-183] in FortiGate version 7.2.3 and below, version 7.0.9 and below Policy-based NGFW Mode may allow an authenticated SSL-VPN user to bypass the policy via bookmarks in the web portal.