Skip to content
Fencer Intel

All · Fortinet

Newest first, late arrivals on top. Also a feed.

  1. 5.3
    CVE-2025-22859 A Relative Path Traversal vulnerability [CWE-23] in FortiClientEMS 7.4.0 through 7.4.1 and FortiClientEMS Cloud 7.4.0 through 7.4.1 may all…
    Fortinet
  2. 2.5
    CVE-2024-35281 An improper isolation or compartmentalization vulnerability [CWE-653] in FortiClientMac version 7.4.2 and below, version 7.2.8 and below, 7…
    Fortinet
  3. 9.8
    CVE-2024-48887 A unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote unauthenticated attacker to change admin password…
    Fortinet
    EPSS 15.7% chance of exploitation in 30 days, percentile 96%
  4. 3.1
    CVE-2024-50565 A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS version 7.4.0 through 7.4…
    Fortinet
  5. 7.5
    CVE-2024-26013 A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS version 7.4.0 through 7.4…
    Fortinet
  6. 7.5
    CVE-2023-37930 Multiple issues including the use of uninitialized ressources [CWE-908] and excessive iteration [CWE-834] vulnerabilities vulnerability in…
    Fortinet
  7. 5.3
    CVE-2024-52962 An Improper Output Neutralization for Logs vulnerability [CWE-117] in FortiAnalyzer version 7.6.1 and below, version 7.4.5 and below, versi…
    Fortinet
  8. 6.2
    CVE-2024-46671 An Incorrect User Management vulnerability [CWE-286] in FortiWeb version 7.6.2 and below, version 7.4.6 and below, version 7.2.10 and below…
    Fortinet
  9. 2.3
    CVE-2024-32122 A storing passwords in a recoverable format in Fortinet FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, Fo…
    Fortinet
  10. 7.2
    CVE-2024-54024 An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiIsola…
    Fortinet
    EPSS 1.2% chance of exploitation in 30 days, percentile 68%
  11. 6.7
    CVE-2024-54025 An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiIsola…
    Fortinet
  12. 7.2
    CVE-2025-25254 An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in FortiWeb version 7.6.2 and belo…
    Fortinet
    EPSS 17.1% chance of exploitation in 30 days, percentile 97%
  13. 2.7
    CVE-2025-22855 An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Fortinet FortiClient befo…
    Fortinet
  14. 9.9
    CVE-2023-40714 A relative path traversal in Fortinet FortiSIEM versions 7.0.0, 6.7.0 through 6.7.2, 6.6.0 through 6.6.3, 6.5.1, 6.5.0 allows attacker to e…
    Fortinet
  15. 4.7
    CVE-2023-33302 A buffer copy without checking size of input ('classic buffer overflow') in Fortinet FortiMail webmail and administrative interface version…
    Fortinet
  16. 5.3
    CVE-2021-24008 An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiDDoS version 5.4.0, version 5…
    Fortinet
  17. 5.5
    CVE-2019-16149 An Improper Neutralization of Input During Web Page Generation in FortiClientEMS version 6.2.0 may allow a remote attacker to execute unaut…
    Fortinet
  18. 9.8
    CVE-2023-25610 A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, ver…
    Fortinet
    EPSS 18.3% chance of exploitation in 30 days, percentile 97%
  19. 7.5
    CVE-2021-26091 A use of a cryptographically weak pseudo-random number generator vulnerability in the authenticator of the Identity Based Encryption servic…
    Fortinet
  20. 6.8
    CVE-2021-26105 A stack-based buffer overflow vulnerability (CWE-121) in the profile parser of FortiSandbox version 3.2.2 and below, version 3.1.4 and belo…
    Fortinet
  21. 4.7
    CVE-2019-16151 An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS 6.4.1 and below, 6.2.9 and below may allow…
    Fortinet
  22. 9.8
    CVE-2023-47539 An improper access control vulnerability in FortiMail version 7.4.0 configured with RADIUS authentication and remote_wildcard enabled may a…
    Fortinet
    EPSS 1.1% chance of exploitation in 30 days, percentile 65%
  23. 8.4
    CVE-2024-21760 An improper control of generation of code ('Code Injection') vulnerability [CWE-94] in FortiSOAR Connector FortiSOAR 7.4 all versions, 7.3…
    Fortinet
  24. 5.3
    CVE-2019-6697 An Improper Neutralization of Input vulnerability affecting FortiGate version 6.2.0 through 6.2.1, 6.0.0 through 6.0.6 in the hostname para…
    Fortinet
  25. 4.7
    CVE-2020-9295 FortiOS 6.2 running AV engine version 6.00142 and below, FortiOS 6.4 running AV engine version 6.00144 and below and FortiClient 6.2 runnin…
    Fortinet
  26. 5.0
    CVE-2020-29010 An exposure of sensitive information to an unauthorized actor vulnerability in FortiOS version 6.2.4 and below, version 6.0.10 and belowmay…
    Fortinet
  27. 3.7
    CVE-2019-17659 A use of hard-coded cryptographic key vulnerability in FortiSIEM version 5.2.6 may allow a remote unauthenticated attacker to obtain SSH ac…
    Fortinet
  28. 6.7
    CVE-2021-22126 A use of hard-coded password vulnerability in FortiWLC version 8.5.2 and below, version 8.4.8 and below, version 8.3.3 to 8.3.2, version 8.…
    Fortinet
  29. 5.3
    CVE-2021-32584 An improper access control (CWE-284) vulnerability in FortiWLC version 8.6.0, version 8.5.3 and below, version 8.4.8 and below, version 8.3…
    Fortinet
  30. 8.2
    CVE-2024-54027 A Use of Hard-coded Cryptographic Key vulnerability [CWE-321] in FortiSandbox version 4.4.6 and below, version 4.2.7 and below, version 4.0…
    Fortinet