Fortinet

Fortios

258 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2023-46715

  • EPSS 0.07%
  • Veröffentlicht 14.01.2025 14:15:27
  • Zuletzt bearbeitet 31.01.2025 17:20:44

An origin validation error [CWE-346] vulnerability in Fortinet FortiOS IPSec VPN version 7.4.0 through 7.4.1 and version 7.2.6 and below allows an authenticated IPSec VPN user with dynamic IP addressing to send (but not receive) packets spoofing the...

8.8

CVE-2020-12820

  • EPSS 0.65%
  • Veröffentlicht 19.12.2024 11:15:05
  • Zuletzt bearbeitet 21.01.2025 20:42:17

Under non-default configuration, a stack-based buffer overflow in FortiOS version 6.0.10 and below, version 5.6.12 and below may allow a remote attacker authenticated to the SSL VPN to crash the FortiClient NAC daemon (fcnacd) and potentially execute...

7.5

CVE-2020-12819

  • EPSS 0.39%
  • Veröffentlicht 19.12.2024 08:15:11
  • Zuletzt bearbeitet 21.01.2025 20:58:57

A heap-based buffer overflow vulnerability in the processing of Link Control Protocol messages in FortiGate versions 5.6.12, 6.0.10, 6.2.4 and 6.4.1 and earlier may allow a remote attacker with valid SSL VPN credentials to crash the SSL VPN daemon by...

4.3

CVE-2024-33510

  • EPSS 0.1%
  • Veröffentlicht 12.11.2024 19:15:09
  • Zuletzt bearbeitet 17.01.2025 20:35:31

An improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability [CWE-74] in FortiOS version 7.4.3 and below, version 7.2.8 and below, version 7.0.16 and below; FortiProxy version 7.4.3 and below, ve...

9.8

CVE-2024-26011

  • EPSS 0.05%
  • Veröffentlicht 12.11.2024 19:15:08
  • Zuletzt bearbeitet 12.12.2024 19:33:58

A missing authentication for critical function in Fortinet FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.14, FortiPAM version 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiProxy version...

8.8

CVE-2023-50176

  • EPSS 0.11%
  • Veröffentlicht 12.11.2024 19:15:07
  • Zuletzt bearbeitet 12.12.2024 19:27:35

A session fixation in Fortinet FortiOS version 7.4.0 through 7.4.3 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.13 allows attacker to execute unauthorized code or commands via phishing SAML authentication link.

5.5

CVE-2024-36505

  • EPSS 0.02%
  • Veröffentlicht 13.08.2024 16:15:08
  • Zuletzt bearbeitet 22.08.2024 14:36:31

An improper access control vulnerability [CWE-284] in FortiOS 7.4.0 through 7.4.3, 7.2.5 through 7.2.7, 7.0.12 through 7.0.14 and 6.4.x may allow an attacker who has already successfully obtained write access to the underlying system (via another hyp...

8.8

CVE-2022-45862

  • EPSS 0.21%
  • Veröffentlicht 13.08.2024 16:15:07
  • Zuletzt bearbeitet 22.08.2024 14:32:16

An insufficient session expiration vulnerability [CWE-613] vulnerability in FortiOS 7.2.5 and below, 7.0 all versions, 6.4 all versions; FortiProxy 7.2 all versions, 7.0 all versions; FortiPAM 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0...

4.7

CVE-2024-26015

  • EPSS 0.05%
  • Veröffentlicht 09.07.2024 16:15:04
  • Zuletzt bearbeitet 21.11.2024 09:01:45

An incorrect parsing of numbers with different radices vulnerability [CWE-1389] in FortiProxy version 7.4.3 and below, version 7.2.10 and below, version 7.0.17 and below and FortiOS version 7.4.3 and below, version 7.2.8 and below, version 7.0.15 and...

7.5

CVE-2024-26010

  • EPSS 0.23%
  • Veröffentlicht 11.06.2024 15:16:04
  • Zuletzt bearbeitet 11.12.2024 19:54:35

A stack-based buffer overflow in Fortinet FortiPAM version 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiWeb, FortiAuthenticator, FortiSwitchManager version 7.2.0 through 7.2.3, 7.0.1 through 7.0.3, FortiOS version 7.4.0 through 7.4.3, 7.2.0 ...