Fortinet

FortiOS

260 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.9

CVE-2018-9195

  • EPSS 0.3%
  • Veröffentlicht 21.11.2019 15:15:12
  • Zuletzt bearbeitet 21.11.2024 04:15:09

Use of a hardcoded cryptographic key in the FortiGuard services communication protocol may allow a Man in the middle with knowledge of the key to eavesdrop on and modify information (URL/SPAM services in FortiOS 5.6, and URL/SPAM/AV services in Forti...

7.5

CVE-2019-15703

  • EPSS 0.3%
  • Veröffentlicht 24.10.2019 14:15:11
  • Zuletzt bearbeitet 21.11.2024 04:29:17

An Insufficient Entropy in PRNG vulnerability in Fortinet FortiOS 6.2.1, 6.2.0, 6.0.8 and below for device not enable hardware TRNG token and models not support builtin TRNG seed allows attacker to theoretically recover the long term ECDSA secret in ...

5.3

CVE-2018-13367

  • EPSS 0.45%
  • Veröffentlicht 23.08.2019 21:15:10
  • Zuletzt bearbeitet 21.11.2024 03:46:58

An information exposure vulnerability in FortiOS 6.2.3, 6.2.0 and below may allow an unauthenticated attacker to gain platform information such as version, models, via parsing a JavaScript file through admin webUI.

6.1

CVE-2019-5586

  • EPSS 0.26%
  • Veröffentlicht 04.06.2019 22:29:00
  • Zuletzt bearbeitet 21.11.2024 04:45:10

A reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiOS 5.2.0 to 5.6.10, 6.0.0 to 6.0.4 under SSL VPN web portal may allow an attacker to execute unauthorized malicious script code via the "param" parameter of the error process HTTP ...

6.5

CVE-2019-5587

  • EPSS 0.1%
  • Veröffentlicht 04.06.2019 22:29:00
  • Zuletzt bearbeitet 21.11.2024 04:45:10

Lack of root file system integrity checking in Fortinet FortiOS VM application images all versions below 6.0.5 may allow attacker to implant malicious programs into the installing image by reassembling the image through specific methods.

6.1

CVE-2019-5588

  • EPSS 0.26%
  • Veröffentlicht 04.06.2019 22:29:00
  • Zuletzt bearbeitet 21.11.2024 04:45:11

A reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4 under SSL VPN web portal may allow an attacker to execute unauthorized malicious script code via the "err" parameter of the error process HTTP requests.

9.8

CVE-2018-13379

Warnung
  • EPSS 94.48%
  • Veröffentlicht 04.06.2019 21:29:00
  • Zuletzt bearbeitet 24.10.2025 12:53:03

An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal all...

6.1

CVE-2018-13380

  • EPSS 34.5%
  • Veröffentlicht 04.06.2019 21:29:00
  • Zuletzt bearbeitet 21.11.2024 03:46:59

A Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4.0 to 5.4.12, 5.2 and below and Fortinet FortiProxy 2.0.0, 1.2.8 and below under SSL VPN web portal allows attacker to execute unauthorized malicious sc...

7.5

CVE-2018-13381

  • EPSS 0.54%
  • Veröffentlicht 04.06.2019 21:29:00
  • Zuletzt bearbeitet 21.11.2024 03:46:59

A buffer overflow vulnerability in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.7, 5.4 and earlier versions and FortiProxy 2.0.0, 1.2.8 and earlier versions under SSL VPN web portal allows a non-authenticated attacker to perform a Denial-o...

7.5

CVE-2018-13382

Warnung
  • EPSS 86.1%
  • Veröffentlicht 04.06.2019 21:29:00
  • Zuletzt bearbeitet 24.10.2025 12:52:57

An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5.4.1 to 5.4.10 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to modify ...