Fortinet FortiOS vulnerabilities

3 known vulnerabilities in Fortinet FortiOS from Fortinet. 2 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Fortinet FortiOS: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2022-35842Nov 2, 2022Fortinet

  An exposure of sensitive information to an unauthorized actor vulnerabiltiy [CWE-200] in FortiOS SSL-VPN versions 7.2.0, versions 7.0.0 through 7.0.6 and versions 6.4.0 through 6.4.9 may allow a remote unauthenticated attacker to gain information about LDAP an

• 7.8 High severity

  Fortinet FortiOS Arbitrary File Download Exploited

  CVE-2021-44168Jan 4, 2022Fortinet

  A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0.3 may allow a local authenticated attacker to download arbitrary files on the device via specially crafted update packages.

• 6.5 Medium severity

  Fortinet FortiOS Default Configuration Exploited

  CVE-2019-5591Aug 14, 2020FortinetEPSS 18.6%

  A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the LDAP server.