FortiOS vulnerabilities

95 known vulnerabilities in FortiOS from Fortinet. 89 are rated high or critical, and 21 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Fortinet FortiOS and FortiProxy Authentication Bypass Exploited

  CVE-2024-55591Jan 14, 2025FortinetEPSS 94.3%

  An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 through 7.0.16 and FortiProxy version 7.0.0 through 7.0.19 and 7.2.0 through 7.2.12 allows a remote attacker to gain super-admin privileges via

• 9.8 Critical severity

  FortiOS: Weak Authentication

  CVE-2024-48886Jan 14, 2025Fortinet

  A weak authentication in Fortinet FortiOS versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.0.15, 6.4.0 through 6.4.15, FortiProxy versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.10, 7.0.0 through 7.0.17, 2.0.0 through 2.0.14, FortiManager ver

• 9.1 Critical severity

  FortiOS: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-48884Jan 14, 2025FortinetEPSS 15.2%

  A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3, FortiManager Cloud 7.4.1 through 7.4.3, FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.4, F

• 7.5 High severity

  FortiOS: Out-of-bounds Read

  CVE-2024-46670Jan 14, 2025Fortinet

  An Out-of-bounds Read vulnerability [CWE-125] in FortiOS version 7.6.0, version 7.4.4 and below, version 7.2.9 and below and FortiSASE FortiOS tenant version 24.3.b IPsec IKE service may allow an unauthenticated remote attacker to trigger memory consumption le

• 7.5 High severity

  FortiOS: Allocation of Resources Without Limits or Throttling

  CVE-2024-46668Jan 14, 2025Fortinet

  An allocation of resources without limits or throttling vulnerability [CWE-770] in FortiOS versions 7.4.0 through 7.4.4, versions 7.2.0 through 7.2.8, versions 7.0.0 through 7.0.15, and versions 6.4.0 through 6.4.15 may allow an unauthenticated remote user to

• 9.8 Critical severity

  FortiManager: Missing Authentication for Critical Functionality

  CVE-2024-26011Nov 12, 2024Fortinet

  A missing authentication for critical function vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.4, FortiManager 7.0.0 through 7.0.11, FortiManager 6.4.0 through 6.4.14, FortiOS 7.4.0 through 7.4.3, FortiOS 7.2.0 throug

• 8.8 High severity

  FortiOS: Session Fixation

  CVE-2023-50176Nov 12, 2024Fortinet

  A session fixation vulnerability in Fortinet FortiOS 7.4.0 through 7.4.3, FortiOS 7.2.0 through 7.2.7, FortiOS 7.0.0 through 7.0.13 allows attacker to execute unauthorized code or commands via phishing SAML authentication link.

• 8.8 High severity

  An insufficient session expiration vulnerability [CWE-613] vulnerability in FortiOS 7.2.5 and…

  CVE-2022-45862Aug 13, 2024Fortinet

  An insufficient session expiration vulnerability [CWE-613] vulnerability in FortiOS 7.2.5 and below, 7.0 all versions, 6.4 all versions; FortiProxy 7.2 all versions, 7.0 all versions; FortiPAM 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versi

• 7.5 High severity

  FortiOS: Out-of-bounds Write

  CVE-2024-26010Jun 11, 2024Fortinet

  A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.3, FortiOS 7.2.0 through 7.2.7, FortiOS 7.0.0 through 7.0.14, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiPAM 1.2 all versions, FortiPAM 1.

• 7.8 High severity

  FortiOS: Out-of-bounds Write

  CVE-2024-23110Jun 11, 2024Fortinet

  A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, 6.0 all versions allows attacker to execute unauthorized code or commands via specially crafte

• 7.8 High severity

  FortiOS: Out-of-bounds Write

  CVE-2023-46720Jun 11, 2024Fortinet

  A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.12 and 6.4.6 through 6.4.15 and 6.2.9 through 6.2.16 and 6.0.13 through 6.0.18 allows attacker to execute unauthorized code or commands

• 7.5 High severity

  FortiOS: Improper Check or Handling of Exceptional Conditions

  CVE-2024-26007May 14, 2024FortinetEPSS 1.16%

  An improper check or handling of exceptional conditions vulnerability [CWE-703] in Fortinet FortiOS version 7.4.1 allows an unauthenticated attacker to provoke a denial of service on the administrative interface via crafted HTTP requests.

• 7.2 High severity

  FortiOS: Stack-based Buffer Overflow

  CVE-2023-46714May 14, 2024FortinetEPSS 1.41%

  A stack-based buffer overflow [CWE-121] vulnerability in Fortinet FortiOS version 7.2.1 through 7.2.6 and version 7.4.0 through 7.4.1 allows a privileged attacker over the administrative interface to execute arbitrary code or commands via crafted HTTP or HTTPs

• 7.2 High severity

  FortiOS: Use of Externally-Controlled Format String

  CVE-2023-45583May 14, 2024Fortinet

  A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiPAM 1.1.0, FortiPAM 1.0 all versions, FortiProxy 7.2.0 through

• 7.2 High severity

  FortiOS: Double Free

  CVE-2023-44247May 14, 2024FortinetEPSS 1.26%

  A double free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 6.4 all versions may allow a privileged attacker to execute code or commands via crafted HTTP or HTTPs requests.

• 7.5 High severity

  FortiOS: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2024-23662Apr 9, 2024Fortinet

  An exposure of sensitive information to an unauthorized actor in Fortinet FortiOS at least version at least 7.4.0 through 7.4.1 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.15 and 6.4.0 through 6.4.15 allows attacker to information disclosure via HTTP request

• 8.8 High severity

  FortiOS: Insufficiently Protected Credentials

  CVE-2023-41677Apr 9, 2024Fortinet

  A insufficiently protected credentials vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4.0 through 6.4.14, FortiOS 6.2.0 through 6.2.15, FortiOS 6.0 all versions, FortiProxy 7.4.0 thro

• 8.8 High severity

  FortiOS: Improper Authentication

  CVE-2023-46717Mar 12, 2024Fortinet

  An improper authentication vulnerability [CWE-287] in FortiOS versions 7.4.1 and below, versions 7.2.6 and below, and versions 7.0.12 and below when configured with FortiAuthenticator in HA may allow a readonly user to gain read-write access via successive log

• 8.1 High severity

  FortiProxy: Stack-based Buffer Overflow

  CVE-2023-42790Mar 12, 2024FortinetEPSS 1.08%

  A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4.0 through 6.4.14, FortiOS 6.2.0 through 6.2.15, FortiProxy 7.4.0, FortiProxy 7.2.0 through 7.2.6, FortiP

• 9.8 Critical severity

  FortiProxy: Out-of-bounds Write

  CVE-2023-42789Mar 12, 2024FortinetEPSS 3.31%

  A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4.0 through 6.4.14, FortiOS 6.2.0 through 6.2.15, FortiProxy 7.4.0, FortiProxy 7.2.0 through 7.2.6, FortiProxy 7.0

• 8.8 High severity

  FortiOS: Use of Externally-Controlled Format String

  CVE-2023-29181Feb 22, 2024Fortinet

  A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4, FortiOS 7.0.0 through 7.0.11, FortiOS 6.4.0 through 6.4.12, FortiOS 6.2.0 through 6.2.14, FortiOS 6.0.0 through 6.0.16, FortiOS 5.6 all versions, FortiOS 5.4 al

• 7.5 High severity

  FortiOS: NULL Pointer Dereference

  CVE-2023-29180Feb 22, 2024FortinetEPSS 2.8%

  A null pointer dereference vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4, FortiOS 7.0.0 through 7.0.11, FortiOS 6.4.0 through 6.4.12, FortiOS 6.2.0 through 6.2.14, FortiOS 6.0.0 through 6.0.16, FortiProxy 7.2.0 through 7.2.3, FortiProxy 7.0.0 through 7

• 9.8 Critical severity

  Fortinet Multiple Products Format String Exploited

  CVE-2024-23113Feb 15, 2024FortinetEPSS 61.7%

  A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, FortiPAM versions 1.2.0, 1.1.0 through

• 9.8 Critical severity

  Fortinet FortiOS Out-of-Bound Write Exploited

  CVE-2024-21762Feb 9, 2024FortinetEPSS 84.6%

  A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.2, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0 through 7.0.13, FortiOS 6.4.0 through 6.4.14, FortiOS 6.2.0 through 6.2.15, FortiOS 6.0 all versions, FortiProxy 7.4.0 through 7.4.2, FortiP

• 8.8 High severity

  FortiOS: Improper Privilege Management

  CVE-2023-44250Jan 10, 2024Fortinet

  An improper privilege management vulnerability [CWE-269] in a Fortinet FortiOS HA cluster version 7.4.0 through 7.4.1 and 7.2.5 and in a FortiProxy HA cluster version 7.4.0 through 7.4.1 allows an authenticated attacker to perform elevated actions via crafted

• 8.8 High severity

  FortiOS: Double Free

  CVE-2023-41678Dec 13, 2023FortinetEPSS 1.07%

  A double free in Fortinet FortiOS versions 7.0.0 through 7.0.5, FortiPAM version 1.0.0 through 1.0.3, 1.1.0 through 1.1.1 allows attacker to execute unauthorized code or commands via specifically crafted request.

• 8.8 High severity

  FortiOS: Use of Externally-Controlled Format String

  CVE-2023-36639Dec 13, 2023FortinetEPSS 1.06%

  A use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.4, 7.0.0 through 7.0.10, FortiOS versions 7.4.0, 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.12, 6.2.0 through 6.2.15, 6.0.0 through 6.0.17, FortiPA

• 8.8 High severity

  FortiOS: Improper Authorization

  CVE-2023-41841Oct 10, 2023FortinetEPSS 1.07%

  An improper authorization vulnerability in Fortinet FortiOS 7.0.0 - 7.0.11 and 7.2.0 - 7.2.4 allows an attacker belonging to the prof-admin profile to perform elevated actions.

• 7.5 High severity

  FortiOS: Use of HTTP Request With Sensitive Query String

  CVE-2023-37935Oct 10, 2023FortinetEPSS 1.12%

  A use of GET request method with sensitive query strings vulnerability in Fortinet FortiOS 7.0.0 - 7.0.12, 7.2.0 - 7.2.5 and 7.4.0 allows an attacker to view plaintext passwords of remote services such as RDP or VNC, if the attacker is able to read the GET req

• 9.8 Critical severity

  FortiProxy: Out-of-bounds Write

  CVE-2023-33308Jul 26, 2023FortinetEPSS 2.12%

  A stack-based overflow vulnerability [CWE-124] in Fortinet FortiOS version 7.0.0 through 7.0.10 and 7.2.0 through 7.2.3 and FortiProxy version 7.0.0 through 7.0.9 and 7.2.0 through 7.2.2 allows a remote unauthenticated attacker to execute arbitrary code or com

• 9.8 Critical severity

  An insufficient session expiration in Fortinet FortiOS 7.0.0 - 7.0.12 and 7.2.0 - 7.2.4 allows…

  CVE-2023-28001Jul 11, 2023Fortinet

  An insufficient session expiration in Fortinet FortiOS 7.0.0 - 7.0.12 and 7.2.0 - 7.2.4 allows an attacker to execute unauthorized code or commands via reusing the session of a deleted user in the REST API.

• 9.8 Critical severity

  Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Exploited

  CVE-2023-27997Jun 13, 2023FortinetEPSS 86.8%

  A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6.4.12 and below, version 6.0.16 and below and FortiProxy version 7.2.3 and below, version 7.0.9 and below, version 2.0.12 and below, ver

• 7.8 High severity

  FortiOS: Out-of-bounds Write

  CVE-2023-22639Jun 13, 2023Fortinet

  A out-of-bounds write in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0 through 7.0.10, FortiOS version 6.4.0 through 6.4.12, FortiOS all versions 6.2, FortiOS all versions 6.0, FortiProxy version 7.2.0 through 7.2.2, FortiProxy version 7.

• 7.8 High severity

  FortiProxy: Use of Externally-Controlled Format String

  CVE-2022-43953Jun 13, 2023Fortinet

  A use of externally-controlled format string in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS all versions 7.0, FortiOS all versions 6.4, FortiOS all versions 6.2, FortiProxy version 7.2.0 through 7.2.1, FortiProxy version 7.0.0 through 7.0.7 allows at

• 8.8 High severity

  FortiOS: Out-of-bounds Write

  CVE-2023-22640May 3, 2023Fortinet

  A out-of-bounds write vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0 through 7.0.10, FortiOS 6.4.0 through 6.4.11, FortiOS 6.2.0 through 6.2.13, FortiOS 6.0.0 through 6.0.16, FortiProxy 7.2.0 through 7.2.1, FortiProxy 7.0.0 through 7.0.7,

• 8.8 High severity

  FortiOS: Improper Restriction of Excessive Authentication Attempts

  CVE-2022-43947Apr 11, 2023Fortinet

  An improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiOS version 7.2.0 through 7.2.3 and before 7.0.10, FortiProxy version 7.2.0 through 7.2.2 and before 7.0.8 administrative interface allows an attacker with a v

• 8.2 High severity

  FortiOS: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-42476Mar 7, 2023Fortinet

  A relative path traversal vulnerability [CWE-23] vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0 through 7.0.8, FortiOS 6.4.0 through 6.4.11, FortiOS 6.2.0 through 6.2.12, FortiProxy 7.2.0 through 7.2.1, FortiProxy 7.0.0 through 7.0.7, For

• 7.1 High severity

  Fortinet FortiOS Path Traversal Exploited

  CVE-2022-41328Mar 7, 2023FortinetEPSS 10.7%

  A improper limitation of a pathname to a restricted directory vulnerability ('path traversal') [CWE-22] in Fortinet FortiOS version 7.2.0 through 7.2.3, 7.0.0 through 7.0.9 and before 6.4.11 allows a privileged attacker to read and write files on the underlyin

• 8.1 High severity

  FortiSwitchManager: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-41335Feb 16, 2023Fortinet

  A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.8 and before 6.4.10, FortiProxy version 7.2.0 through 7.2.1, 7.0.0 through 7.0.7 and before 2.0.10, FortiSwitchManager 7.2.0 and before 7.0.0 al

• 7.4 High severity

  FortiProxy: Improper Certificate Validation

  CVE-2022-39948Feb 16, 2023Fortinet

  An improper certificate validation vulnerability [CWE-295] in FortiOS 7.2.0 through 7.2.3, 7.0.0 through 7.0.7, 6.4 all versions, 6.2 all versions, 6.0 all versions and FortiProxy 7.0.0 through 7.0.6, 2.0 all versions, 1.2 all versions may allow a remote and u