FO
Network Security
FortiOS
On CISA KEVExploited in the wildRansomware-linked
282
CVEs
21
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 23High 86Medium 146Low 10
Watch
Add FortiOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-38380 | 4.3 | Nov 2 | An improper access control [CWE-284] vulnerability in FortiOS version 7.2.0 and versions 7.0.0 through 7.0.7 may allow a remote authenticated read-only user to modify the… Affected: FortiOS 7.2.0, 7.0.7, 7.0.6, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0 |
| CVE-2022-23442 | 4.3 | Aug 3 | An improper access control vulnerability [CWE-284] in FortiOS versions 6.2.0 through 6.2.11, 6.4.0 through 6.4.8 and 7.0.0 through 7.0.5 may allow an authenticated attacker with a… Affected: FortiOS 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0, 6.4.8, 6.4.7, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.11, 6.2.10, 6.2.9, 6.2.8, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0 |
| CVE-2021-42755 | 4.3 | Jul 18 | An integer overflow / wraparound vulnerability [CWE-190] in FortiSwitch 7.0.2 and below, 6.4.9 and below, 6.2.x, 6.0.x; FortiRecorder 6.4.2 and below, 6.0.10 and below; FortiOS… Affected: 5.4.0; 5.4.1; 5.4.2; 5.4.3; 5.4.4; 5.4.5; +34 more |
| CVE-2021-43206 | 4.3 | May 4 | A server-generated error message containing sensitive information in Fortinet FortiOS 7.0.0 through 7.0.3, 6.4.0 through 6.4.8, 6.2.x, 6.0.x and FortiProxy 7.0.0 through 7.0.1,… Affected: 5.6.0 before 6.0.14; 6.2.0 before 6.2.10; 6.4.0 before 6.4.8; 7.0.0 before 7.0.4 |
| CVE-2022-22305 | 4.2 | Sep 1 | An improper certificate validation vulnerability [CWE-295] in FortiManager 7.0.1 and below, 6.4.6 and below; FortiAnalyzer 7.0.2 and below, 6.4.7 and below; FortiOS 6.2.x and… Affected: 5.6.10 through 5.6.14; 6.0.0 through 6.0.17; 6.2.0 through 6.2.15 |
| CVE-2021-32600 | 3.8 | Nov 17 | An exposure of sensitive information to an unauthorized actor vulnerability in FortiOS CLI 7.0.0, 6.4.0 through 6.4.6, 6.2.0 through 6.2.9, 6.0.x and 5.6.x may allow a local and… Affected: 5.6.0 through 5.6.9; 6.0.0 through 6.0.13; 6.2.0 before 6.2.10; 6.4.0 before 6.4.7; 7.0.0 |
| CVE-2025-47295 | 3.7 | May 28 | A buffer over-read in Fortinet FortiOS versions 7.4.0 through 7.4.3, versions 7.2.0 through 7.2.7, and versions 7.0.0 through 7.0.14 may allow a remote unauthenticated attacker to… Affected: 6.4.0 before 7.0.15; 7.2.0 before 7.2.8; 7.4.0 before 7.4.4 |
| CVE-2024-46665 | 3.7 | Jan 14 | An insertion of sensitive information into sent data vulnerability [CWE-201] in FortiOS 7.6.0, 7.4.0 through 7.4.4 may allow an attacker in a man-in-the-middle position to… Affected: 7.4.0 before 7.4.5; 7.6.0 |
| CVE-2022-22302 | 3.3 | Jul 11 | A clear text storage of sensitive information (CWE-312) vulnerability in both FortiGate version 6.4.0 through 6.4.1, 6.2.0 through 6.2.9 and 6.0.0 through 6.0.13 and… Affected: 6.0.0 through 6.0.13; 6.2.0 through 6.2.9; 6.4.0; 6.4.1 |
| CVE-2022-29054 | 3.3 | Feb 16 | A missing cryptographic steps vulnerability [CWE-325] in the functions that encrypt the DHCP and DNS keys in Fortinet FortiOS version 7.2.0, 7.0.0 through 7.0.5, 6.4.0 through… Affected: 6.0.0 through 6.0.16; 6.2.0 through 6.2.12; 6.4.0 through 6.4.11; 7.0.0 before 7.0.8; 7.2.0 |
| CVE-2022-29053 | 3.3 | Sep 6 | A missing cryptographic steps vulnerability [CWE-325] in the functions that encrypt the keytab files in FortiOS version 7.2.0, 7.0.0 through 7.0.5 and below 7.0.0 may allow an… Affected: 6.0.0 through 6.0.14; 6.2.0 through 6.2.11; 6.4.0 through 6.4.9; 7.0.0 before 7.0.6; 7.2.0 |
| CVE-2026-84392 | 2.7 | Sep 8 | A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiPAM 1.9.0, FortiPAM 1.8 all versions,… Affected: 7.4.0 through 7.4.12; 7.2.0 through 7.2.13; 7.0.0 through 7.0.19; 6.4.0 through 6.4.16 |
| CVE-2022-42474 | 2.7 | Jun 13 | A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.9 and before 6.4.12, FortiProxy version 7.2.0 through… Affected: 6.2.0 through 6.2.15; 6.4.0 through 6.4.12; 7.0.0 through 7.0.9; 7.2.0 through 7.2.3 |
| CVE-2026-106175 | 2.3 | Oct 13 | A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.6,… Affected: 7.6.0 through 7.6.7; 7.4.0 through 7.4.12; 7.2.0 through 7.2.13; 7.0.0 through 7.0.19 |
| CVE-2023-29184 | 2.3 | Jun 10 | An incomplete cleanup vulnerability [CWE-459] in FortiOS 7.2 all versions and before & FortiProxy version 7.2.0 through 7.2.2 and before 7.0.8 allows a VDOM privileged attacker… Affected: 6.2.0 through 7.2.11 |
| CVE-2015-7361 | – | Oct 15 | FortiOS 5.2.3, when configured to use High Availability (HA) and the dedicated management interface is enabled, does not require authentication for access to the ZebOS shell on… Affected: 5.2.3 |
| CVE-2015-5965 | – | Aug 11 | The SSL-VPN feature in Fortinet FortiOS before 4.3.13 only checks the first byte of the TLS MAC in finished messages, which makes it easier for remote attackers to spoof encrypted… Affected: through 4.3.12 |
| CVE-2015-3626 | – | Aug 11 | Cross-site scripting (XSS) vulnerability in the DHCP Monitor page in the Web User Interface (WebUI) in Fortinet FortiOS before 5.2.4 on FortiGate devices allows remote attackers… Affected: through 5.2.3 |
| CVE-2015-2323 | – | Aug 11 | FortiOS 5.0.x before 5.0.12 and 5.2.x before 5.2.4 supports anonymous, export, RC4, and possibly other weak ciphers when using TLS to connect to FortiGuard servers, which allows… Affected: 5.0.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; 5.0.5; +10 more |
| CVE-2015-1880 | – | May 12 | Cross-site scripting (XSS) vulnerability in the sslvpn login page in Fortinet FortiOS 5.2.x before 5.2.3 allows remote attackers to inject arbitrary web script or HTML via… Affected: 5.2.0; 5.2.1; 5.2.2 |
| CVE-2014-8616 | – | May 12 | Multiple cross-site scripting (XSS) vulnerabilities in Fortinet FortiOS 5.2.x before 5.2.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to… Affected: 5.2.0; 5.2.1; 5.2.2 |
| CVE-2015-1571 | – | Feb 10 | The CAPWAP DTLS protocol implementation in Fortinet FortiOS 5.0 Patch 7 build 4457 uses the same certificate and private key across different customers' installations, which makes… Affected: 5.0.7 |
| CVE-2015-1452 | – | Feb 2 | The Control and Provisioning of Wireless Access Points (CAPWAP) daemon in Fortinet FortiOS 5.0 Patch 7 build 4457 allows remote attackers to cause a denial of service (locked… Affected: 5.0.7 |
| CVE-2015-1451 | – | Feb 2 | Multiple cross-site scripting (XSS) vulnerabilities in Fortinet FortiOS 5.0 Patch 7 build 4457 allow remote authenticated users to inject arbitrary web script or HTML via the (1)… Affected: 5.0.7 |
| CVE-2014-0351 | – | Sep 10 | The FortiManager protocol service in Fortinet FortiOS before 4.3.16 and 5.x before 5.0.8 on FortiGate devices does not prevent use of anonymous ciphersuites, which makes it easier… Affected: through 4.3.15; 4.3.10; 4.3.12; 4.3.13; 4.3.14; 5.0.0; +5 more |
| CVE-2014-2216 | – | Aug 25 | The FortiManager protocol service in Fortinet FortiOS before 4.3.16 and 5.0.0 before 5.0.8 on FortiGate devices allows remote attackers to cause a denial of service and possibly… Affected: through 4.3.15; 4.3.10; 4.3.12; 4.3.13; 4.3.14; 5.0.0; +5 more |
| CVE-2013-7182 | – | Feb 4 | Cross-site scripting (XSS) vulnerability in firewall/schedule/recurrdlg in Fortinet FortiOS 5.0.5 allows remote attackers to inject arbitrary web script or HTML via the mkey… Affected: 5.0.5 |
| CVE-2013-1414 | – | Jul 8 | Multiple cross-site request forgery (CSRF) vulnerabilities in Fortinet FortiOS on FortiGate firewall devices before 4.3.13 and 5.x before 5.0.2 allow remote attackers to hijack… Affected: through 4.3.12; 4.3.10; 5.0; 5.0.1 |
| CVE-2013-4604 | – | Jun 25 | Fortinet FortiOS before 5.0.3 on FortiGate devices does not properly restrict Guest capabilities, which allows remote authenticated users to read, modify, or delete the records of… Affected: through 5.0.2; 5.0.1 |
| CVE-2006-3222 | – | Jun 24 | The FTP proxy module in Fortinet FortiOS (FortiGate) before 2.80 MR12 and 3.0 MR2 allows remote attackers to bypass anti-virus scanning via the Enhanced Passive (EPSV) FTP mode Affected: 2.5_0mr4; 2.8_mr10; 2.36; 2.50; 2.50_mr5; 2.80; +3 more |
| CVE-2005-3058 | – | Dec 31 | Interpretation conflict in Fortinet FortiGate 2.8, running FortiOS 2.8MR10 and v3beta, allows remote attackers to bypass the URL blocker via an (1) HTTP request terminated with a… Affected: through 2.8_mr10; through 3_beta |
| CVE-2005-3057 | – | Dec 31 | The FTP component in FortiGate 2.8 running FortiOS 2.8MR10 and v3beta, and other versions before 3.0 MR1, allows remote attackers to bypass the Fortinet FTP anti-virus engine by… Affected: through 2.8_mr10; through 3_beta |