Fortinet Fortifone vulnerabilities

2 vulnerabilities

Known vulnerabilities in Fortinet Fortifone, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.2CVE-2021-36193fortinetfortiadc+9
EPSS score
0.82%
Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an authenticated attacker to achieve arbitrary code execution via specially crafted commands.9.8CVE-2025-47855fortinetfortifone
EPSS score
0.94%
An exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in Fortinet FortiFone 7.0.0 through 7.0.1, FortiFone 3.0.13 through 3.0.23 allows an unauthenticated attacker to obtain the device configuration via crafted HTTP or HTTPS requests.