CveMateVulnerability intelligence

Fortinet, Inc. Fortinet Fortios vulnerabilities

7 vulnerabilities

Known vulnerabilities in Fortinet, Inc. Fortinet Fortios, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2018-13376fortinet, inc.fortinet fortios+17y ago27-11-2018 15:00

An uninitialized memory buffer leak exists in Fortinet FortiOS 5.6.1 to 5.6.3, 5.4.6 to 5.4.7, 5.2 all versions under web proxy's disclaimer response web pages, potentially causing sensitive data to be displayed in the HTTP response.CVE-2017-7734fortinet, inc.fortinet fortios+19y ago12-09-2017 02:00

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via 'Comments' while saving Config Revisions.CVE-2017-7735fortinet, inc.fortinet fortios+19y ago12-09-2017 02:00

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.2.0 through 5.2.11 and 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via the "Groups" input while creating or editing User Groups.CVE-2017-3132fortinet, inc.fortinet fortios+19y ago12-09-2017 02:00

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to Execute unauthorized code or commands via the action input during the activation of a FortiToken.CVE-2017-3133fortinet, inc.fortinet fortios+19y ago12-09-2017 02:00

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to execute unauthorized code or commands via the Replacement Message HTML for SSL-VPN.CVE-2017-3130fortinet, inc.fortinet fortios+19y ago10-08-2017 21:00

An information disclosure vulnerability in Fortinet FortiOS 5.6.0, 5.4.4 and below versions allows attacker to get FortiOS version info by inspecting FortiOS IKE VendorID packets.CVE-2017-3131fortinet, inc.fortinet fortios+19y ago12-09-2017 02:00

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 and 5.6.0 allows attackers to execute unauthorized code or commands via the filter input in "Applications" under FortiView.