Fortinet

Fortisase

8 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2025-58413

  • EPSS 0.01%
  • Veröffentlicht 18.11.2025 17:01:22
  • Zuletzt bearbeitet 21.11.2025 09:15:47

A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiS...

4.3

CVE-2024-47569

  • EPSS 0.02%
  • Veröffentlicht 14.10.2025 15:23:03
  • Zuletzt bearbeitet 15.10.2025 17:36:57

A insertion of sensitive information into sent data in Fortinet FortiManager Cloud 7.4.1 through 7.4.3, FortiVoice 7.0.0 through 7.0.4, 6.4.0 through 6.4.9, 6.0.7 through 6.0.12, FortiMail 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.9...

6.1

CVE-2025-31366

  • EPSS 0.04%
  • Veröffentlicht 14.10.2025 15:22:57
  • Zuletzt bearbeitet 15.10.2025 17:15:36

An Improper Neutralization of Input During Web Page Generation vulnerability [CWE-79] in FortiOS 7.6.0 through 7.6.3, 7.4.0 through 7.4.7, 7.2 all versions, 7.0 all versions, 6.4 all versions; FortiProxy 7.6.0 through 7.6.3, 7.4.0 through 7.4.9, 7.2 ...

6.1

CVE-2025-47890

  • EPSS 0.03%
  • Veröffentlicht 14.10.2025 15:22:50
  • Zuletzt bearbeitet 22.10.2025 16:48:09

An URL Redirection to Untrusted Site vulnerabilities [CWE-601] in FortiOS 7.6.0 through 7.6.2, 7.4.0 through 7.4.8, 7.2 all versions, 7.0 all versions, 6.4 all versions; FortiProxy 7.6.0 through 7.6.3, 7.4 all versions, 7.2 all versions, 7.0 all vers...

5.3

CVE-2024-55599

Medienbericht
  • EPSS 0.03%
  • Veröffentlicht 08.07.2025 14:41:34
  • Zuletzt bearbeitet 22.07.2025 16:22:46

An Improperly Implemented Security Check for Standard vulnerability [CWE-358] in FortiOS version 7.6.0, version 7.4.7 and below, 7.0 all versions, 6.4 all versions and FortiProxy version 7.6.1 and below, version 7.4.8 and below, 7.2 all versions, 7.0...

4.3

CVE-2025-25250

  • EPSS 0.04%
  • Veröffentlicht 10.06.2025 16:36:19
  • Zuletzt bearbeitet 22.07.2025 17:52:45

An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] in FortiOS version 7.6.0, version 7.4.7 and below, 7.2 all versions, 7.0 all versions, 6.4 all versions SSL-VPN web-mode may allow an authenticated user to access f...

6.5

CVE-2025-24471

  • EPSS 0.04%
  • Veröffentlicht 10.06.2025 16:36:18
  • Zuletzt bearbeitet 22.07.2025 17:57:19

An Improper Certificate Validation vulnerability [CWE-295] in FortiOS version 7.6.1 and below, version 7.4.7 and below may allow an EAP verified remote user to connect from FortiClient via revoked certificate.

4.8

CVE-2024-50562

Medienbericht
  • EPSS 0.24%
  • Veröffentlicht 10.06.2025 16:36:10
  • Zuletzt bearbeitet 25.07.2025 15:25:23

An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL-VPN version 7.6.0, version 7.4.6 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions may allow an attacker in possession of a cookie used to log in the SSL-...