FO
Network Security
FortiOS
On CISA KEVExploited in the wildRansomware-linked
284
CVEs
21
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 23High 86Medium 147Low 11
Watch
Add FortiOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-31366 | 6.1 | Oct 14 | An Improper Neutralization of Input During Web Page Generation vulnerability [CWE-79] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS… Affected: 7.6.0 through 7.6.2; 7.4.0 through 7.4.7; 7.2.0 through 7.2.13; 7.0.0 through 7.0.19; 6.4.0 through 6.4.16 |
| CVE-2025-47890 | 6.1 | Oct 14 | An URL Redirection to Untrusted Site vulnerabilities [CWE-601] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions,… Affected: 7.6.0 through 7.6.2; 7.4.0 through 7.4.8; 7.2.0 through 7.2.13; 7.0.0 through 7.0.19; 6.4.0 through 6.4.16 |
| CVE-2019-16151 | 6.1 | Mar 21 | An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS 6.4.1 and below, 6.2.9 and below may allow a remote unauthenticated attacker to… Affected: 6.2.0 before 6.2.10; 6.4.0 before 6.4.2 |
| CVE-2019-6697 | 6.1 | Mar 17 | An Improper Neutralization of Input vulnerability affecting FortiGate version 6.2.0 through 6.2.1, 6.0.0 through 6.0.6 in the hostname parameter of a DHCP packet under DHCP… Affected: 6.0.0 before 6.0.7; 6.2.0 before 6.2.2 |
| CVE-2024-26006 | 6.1 | Mar 14 | An improper neutralization of input during web page Generation vulnerability [CWE-79] in FortiOS version 7.4.3 and below, version 7.2.7 and below, version 7.0.13 and below and… Affected: 6.4.0 before 7.0.14; 7.2.0 before 7.2.8; 7.4.0 before 7.4.4 |
| CVE-2022-23439 | 6.1 | Jan 22 | A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests, where the `Host`… Affected: 6.0.0 before 7.0.6; 7.2.0 before 7.2.5 |
| CVE-2022-41330 | 6.1 | Apr 11 | An improper neutralization of input during web page generation vulnerability ('Cross-site Scripting') [CWE-79] in Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0… Affected: 6.2.0 before 6.2.13; 6.4.0 before 6.4.12; 7.0.0 before 7.0.10; 7.2.0 before 7.2.4 |
| CVE-2022-41334 | 6.1 | Feb 16 | An improper neutralization of input during web page generation [CWE-79] vulnerability in FortiOS versions 7.0.0 to 7.0.7 and 7.2.0 to 7.2.3 may allow a remote, unauthenticated… Affected: 7.0.0 through 7.0.7; 7.2.0 through 7.2.3 |
| CVE-2022-23438 | 6.1 | Jul 18 | An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in FortiOS version 7.0.5 and prior and 6.4.9 and prior may allow an… Affected: through 6.4.9; 7.0.0 through 7.0.5 |
| CVE-2021-43081 | 6.1 | May 11 | An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS version 7.0.3 and below, 6.4.8 and below, 6.2.10 and below, 6.0.14 to 6.0.0 Affected: 6.0.0 through 6.0.14; 6.2.0 through 6.2.10; 6.4.0 before 6.4.9; 7.0.0 before 7.0.4 |
| CVE-2021-26092 | 6.1 | Feb 24 | Failure to sanitize input in the SSL VPN web portal of FortiOS 5.2.10 through 5.2.15, 5.4.0 through 5.4.13, 5.6.0 through 5.6.14, 6.0.0 through 6.0.12, 6.2.0 through 6.2.7, 6.4.0… Affected: 5.2.10 through 5.2.15; 5.4.0 through 5.4.13; 5.6.0 through 5.6.14; 6.0.0 through 6.0.12; 6.2.0 through 6.2.7; 6.4.0 through 6.4.4 |
| CVE-2020-15937 | 6.1 | Mar 3 | An improper neutralization of input vulnerability in FortiGate version 6.2.x below 6.2.5 and 6.4.x below 6.4.1 may allow a remote attacker to perform a stored cross site scripting… Affected: 6.2.0 before 6.2.5; 6.4.0 before 6.4.1 |
| CVE-2019-6696 | 6.1 | Mar 15 | An improper input validation vulnerability in FortiOS 6.2.1, 6.2.0, 6.0.8 and below until 5.4.0 under admin webUI may allow an attacker to perform an URL redirect attack via a… Affected: 5.4.0 through 6.0.8; 6.2.0; 6.2.1 |
| CVE-2019-5588 | 6.1 | Jun 4 | A reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4 under SSL VPN web portal may allow an attacker to execute unauthorized malicious script… Affected: 6.0.0 through 6.0.4 |
| CVE-2019-5586 | 6.1 | Jun 4 | A reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiOS 5.2.0 to 5.6.10, 6.0.0 to 6.0.4 under SSL VPN web portal may allow an attacker to execute unauthorized… Affected: 5.2.0 through 6.0.4 |
| CVE-2018-13384 | 6.1 | Jun 4 | A Host Header Redirection vulnerability in Fortinet FortiOS all versions below 6.0.5 under SSL VPN web portal allows a remote attacker to potentially poison HTTP cache and… Affected: before 6.0.5 |
| CVE-2018-13380 | 6.1 | Jun 4 | A Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4.0 to 5.4.12, 5.2 and below and Fortinet FortiProxy 2.0.0, 1.2.8 and below under… Affected: through 5.2; 5.4.0 through 5.4.12; 5.6.0 through 5.6.7; 6.0.0 through 6.0.4 |
| CVE-2012-0941 | 6.1 | Feb 8 | Multiple cross-site scripting (XSS) vulnerabilities in Fortinet FortiGate UTM WAF appliances with FortiOS 4.3.x before 4.3.6 allow remote attackers to inject arbitrary web script… Affected: 4.3.0 before 4.3.6 |
| CVE-2017-14190 | 6.1 | Jan 29 | A Cross-site Scripting vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.7, 5.2 and earlier, allows attacker to inject arbitrary web script or HTML via maliciously… Affected: through 5.2.0; 5.4.0 through 5.4.7; 5.6.0 through 5.6.2 |
| CVE-2017-7739 | 6.1 | Nov 13 | A reflected Cross-site Scripting (XSS) vulnerability in web proxy disclaimer response web pages in Fortinet FortiOS 5.6.0, 5.4.0 to 5.4.5, 5.2.0 to 5.2.11 allows an… Affected: 5.2.0; 5.2.1; 5.2.2; 5.2.3; 5.2.4; 5.2.5; +13 more |
| CVE-2017-7733 | 6.1 | Oct 27 | A Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiOS 5.4.0 to 5.4.5 and 5.6.0 allows a remote unauthenticated attacker to execute arbitrary javascript code via webUI… Affected: 5.4.0; 5.4.1; 5.4.2; 5.4.3; 5.4.4; 5.4.5; +1 more |
| CVE-2017-3133 | 6.1 | Sep 12 | A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to execute unauthorized code or commands via the Replacement Message HTML for… Affected: through 5.6.0 |
| CVE-2017-3132 | 6.1 | Sep 12 | A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to Execute unauthorized code or commands via the action input during the… Affected: through 5.6.0 |
| CVE-2017-3127 | 6.1 | Jun 1 | A Cross-Site Scripting vulnerability in Fortinet FortiGate 5.2.0 through 5.2.10 allows attacker to execute unauthorized code or commands via the srcintf parameter during Firewall… Affected: 5.2.0; 5.2.1; 5.2.2; 5.2.3; 5.2.4; 5.2.5; +5 more |
| CVE-2016-3978 | 6.1 | Apr 8 | The Web User Interface (WebUI) in FortiOS 5.0.x before 5.0.13, 5.2.x before 5.2.3, and 5.4.x before 5.4.0 allows remote attackers to redirect users to arbitrary web sites and… Affected: 5.0.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; 5.0.5; +11 more |
| CVE-2025-54821 | 6.0 | Nov 18 | An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.11, FortiOS 7.2 all versions, FortiOS 7.0… Affected: 7.6.0 through 7.6.3; 7.4.0 through 7.4.11; 7.2.0 through 7.2.13; 7.0.0 through 7.0.19; 6.4.0 through 6.4.16 |
| CVE-2022-38378 | 6.0 | Feb 16 | An improper privilege management vulnerability [CWE-269] in Fortinet FortiOS version 7.2.0 and before 7.0.7 and FortiProxy version 7.2.0 through 7.2.1 and before 7.0.7 allows an… Affected: 6.0.0 before 7.0.8; 7.2.0 before 7.2.1 |
| CVE-2021-36169 | 6.0 | Dec 13 | A Hidden Functionality in Fortinet FortiOS 7.x before 7.0.1, FortiOS 6.4.x before 6.4.7 allows attacker to Execute unauthorized code or commands via specific hex read/write… Affected: 5.6.0 through 5.6.14; 6.0.0 through 6.0.14; 6.2.0 before 6.2.10; 6.4.0 before 6.4.7; 7.0.0 |
| CVE-2024-50568 | 5.9 | Jun 10 | A channel accessible by non-endpoint vulnerability [CWE-300] in Fortinet FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7 and before 7.0.14 & FortiProxy version 7.4.0… Affected: 6.4.2 before 7.2.9; 7.4.0 before 7.4.4 |
| CVE-2024-52963 | 5.9 | Jan 14 | A out-of-bounds write in Fortinet FortiOS versions 7.6.0, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4.0 through 6.4.15 allows attacker to trigger a denial… Affected: 7.6.0; 7.4.0 through 7.4.6; 7.2.0 through 7.2.10; 7.0.0 through 7.0.16; 6.4.0 through 6.4.15 |
| CVE-2018-9195 | 5.9 | Nov 21 | Use of a hardcoded cryptographic key in the FortiGuard services communication protocol may allow a Man in the middle with knowledge of the key to eavesdrop on and modify… Affected: through 6.0.6 |
| CVE-2018-9194 | 5.9 | Sep 5 | A plaintext recovery of encrypted messages or a Man-in-the-middle (MiTM) attack on RSA PKCS #1 v1.5 encryption may be possible without knowledge of the server's private key Affected: 5.4.6 through 5.4.9; 6.0.0; 6.0.1 |
| CVE-2018-9192 | 5.9 | Sep 5 | A plaintext recovery of encrypted messages or a Man-in-the-middle (MiTM) attack on RSA PKCS #1 v1.5 encryption may be possible without knowledge of the server's private key Affected: 5.4.6 through 5.4.9; 6.0.0; 6.0.1 |
| CVE-2016-7541 | 5.9 | Mar 30 | Long lived sessions in Fortinet FortiGate devices with FortiOS 5.x before 5.4.0 could violate a security policy during IPS signature updates when the FortiGate's IPSengine is… Affected: 5.0.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; 5.0.5; +20 more |
| CVE-2016-8492 | 5.9 | Feb 8 | The implementation of an ANSI X9.31 RNG in Fortinet FortiGate allows attackers to gain unauthorized read access to data handled by the device via IPSec/TLS decryption Affected: through 4.3.18; 4.3.0; 4.3.10; 4.3.12; 4.3.13; 4.3.14; +3 more |
| CVE-2025-55018 | 5.8 | Feb 10 | An inconsistent interpretation of http requests ('http request smuggling') vulnerability in Fortinet FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS… Affected: 7.6.0; 7.4.0 through 7.4.9; 7.2.0 through 7.2.13; 7.0.0 through 7.0.19; 6.4.3 through 6.4.16 |
| CVE-2024-54021 | 5.8 | Jan 14 | An Improper Neutralization of CRLF Sequences in HTTP Headers ('http response splitting') vulnerability [CWE-113] in Fortinet FortiOS 7.2.0 through 7.6.0, FortiProxy 7.2.0 through… Affected: 7.2.0 before 7.2.9; 7.4.0 before 7.4.5; 7.6.0 |
| CVE-2025-62631 | 5.6 | Dec 9 | An insufficient session expiration vulnerability [CWE-613] vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions… Affected: 7.4.0; 7.2.0 through 7.2.13; 7.0.0 through 7.0.19; 6.4.0 through 6.4.16 |
| CVE-2026-59839 | 5.5 | Jul 14 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2… Affected: 7.6.0 through 7.6.6; 7.4.0 through 7.4.9; 7.2.0 through 7.2.13; 7.0.0 through 7.0.19; 6.4.0 through 6.4.16 |
| CVE-2024-36505 | 5.5 | Aug 13 | An improper access control vulnerability [CWE-284] in FortiOS 7.4.0 through 7.4.3, 7.2.5 through 7.2.7, 7.0.12 through 7.0.14 and 6.4.x may allow an attacker who has already… Affected: 6.4.13 through 6.4.15; 7.0.12 before 7.0.15; 7.2.5 before 7.2.8; 7.4.0 before 7.4.4 |
| CVE-2019-5593 | 5.5 | Jan 23 | Improper permission or value checking in the CLI console may allow a non-privileged user to obtain Fortinet FortiOS plaint text private keys of system's builtin local certificates… Affected: through 5.6.10; 6.0.0 through 6.0.6; 6.2.0 |
| CVE-2019-15706 | 5.4 | Mar 17 | An improper neutralization of input during web page generation in the SSL VPN portal of FortiProxy version 2.0.0, version 1.2.9 and below and FortiOS version 6.2.1 and below,… Affected: 5.6.0 before 5.6.13; 6.0.0 before 6.0.9; 6.2.0 before 6.2.2 |
| CVE-2023-36555 | 5.4 | Oct 10 | An improper neutralization of script-related html tags in a web page (basic xss) in Fortinet FortiOS 7.2.0 - 7.2.4 allows an attacker to execute unauthorized code or commands via… Affected: 7.2.0 through 7.2.4 |
| CVE-2023-29183 | 5.4 | Sep 13 | An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiProxy 7.2.0 through 7.2.4, 7.0.0 through 7.0.10 and FortiOS… Affected: 6.2.0 before 6.2.15; 6.4.0 before 6.4.13; 7.0.0 before 7.0.12; 7.2.0 before 7.2.5 |
| CVE-2023-22641 | 5.4 | Apr 11 | A url redirection to untrusted site ('open redirect') in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0 through 7.0.9, FortiOS versions 6.4.0 through 6.4.12,… Affected: 6.0.0 before 6.4.13; 7.0.0 before 7.0.11; 7.2.0 before 7.2.4 |
| CVE-2022-42472 | 5.4 | Feb 16 | A improper neutralization of crlf sequences in http headers ('http response splitting') vulnerability in Fortinet FortiOS 7.2.0 through 7.2.2, FortiOS 7.0.0 through 7.0.8, FortiOS… Affected: 7.2.0 through 7.2.2; 7.0.0 through 7.0.8; 6.4.0 through 6.4.12; 6.2.0 through 6.2.17; 6.0.0 through 6.0.18 |
| CVE-2022-40680 | 5.4 | Dec 6 | A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiOS 6.0.7 - 6.0.15, 6.2.2 - 6.2.12, 6.4.0 - 6.4.9 and 7.0.0 - 7.0.3 allows a… Affected: 6.0.7 through 6.0.15; 6.2.2 through 6.2.12; 6.4.0 through 6.4.9; 7.0.0 through 7.0.3 |
| CVE-2021-43080 | 5.4 | Sep 6 | An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS version 7.2.0, version 6.4.0 through 6.4.9, version 7.0.0 through 7.0.5 may allow… Affected: 6.4.0 before 6.4.10; 7.0.0 before 7.0.6; 7.2.0 |
| CVE-2021-41032 | 5.4 | May 4 | An improper access control vulnerability [CWE-284] in FortiOS versions 6.4.8 and prior and 7.0.3 and prior may allow an authenticated attacker with a restricted user profile to… Affected: 6.2.0 before 6.4.9; 7.0.0 before 7.0.4 |
| CVE-2017-14186 | 5.4 | Nov 29 | A Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4 and below versions under SSL VPN web portal allows a remote user to inject… Affected: through 5.0; after 5.2.0 through 5.2.12; 5.4.0 through 5.4.6; 5.6.0 through 5.6.2 |