6433 matches found
PT-2025-32877 · Fortinet · Fortiweb Cli
Name of the Vulnerable Software and Affected Versions: Fortinet FortiWeb CLI versions 7.6.0 through 7.6.3 Fortinet FortiWeb CLI versions prior to 7.4.8 Description: A stack-based buffer overflow vulnerability allows a privileged attacker to execute arbitrary code or commands via crafted CLI...
CVE-2025-27759: Improper Neutralization of Special Elements used in an OS Command
An improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability CWE-78 in Fortinet FortiWeb version 7.6.0 through 7.6.3, 7.4.0 through 7.4.7, 7.2.0 through 7.2.10 and before 7.0.10 allows an authenticated privileged attacker to execute unauthorized code o...
Fortinet多款产品 输入验证错误漏洞
Fortinet FortiOS and others are products of Fortinet, Inc.Fortinet FortiOS is a dedicated security operating system on the FortiGate network security platform.Fortinet FortiProxy SSL VPN is a software application.Fortinet FortiPAM is a platform for privilege access control. An input validation...
Fortinet Fortigate Weak authentication - FGFM protocol (FG-IR-24-042)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-042 advisory. - An authentication bypass using an alternate path or channel CWE-288 vulnerability in Fortinet FortiOS version 6.4.0 through...
Fortinet Fortigate Integer Overflow on SSL-VPN bookmarks (FG-IR-24-364)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-364 advisory. - An Integer Overflow or Wraparound vulnerability CWE-190 in FortiOS version 7.6.2 and below, version 7.4.7 and below, versio...
Fortinet FortiManager Arbitrary file overwrite in FGFMd (FG-IR-24-473)
The version of FortiManager installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-473 advisory. - An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability CWE-22 in Fortinet...
Fortinet FortiWeb CLI 安全漏洞
Fortinet FortiWeb CLI is a command line interface from Fortinet, Inc. A security vulnerability exists in Fortinet FortiWeb CLI versions 7.6.0 through 7.6.3 and prior to 7.4.8, which originates from a stack buffer overflow and could lead to the execution of arbitrary code...
PT-2025-32871 · Fortinet · Fortindr +4
Name of the Vulnerable Software and Affected Versions: Fortinet FortiMail versions 7.6.0 through 7.6.1 and prior to 7.4.3 Fortinet FortiVoice versions 7.0.0 through 7.0.5 and prior to 7.4.9 Fortinet FortiRecorder versions 7.2.0 through 7.2.1 and prior to 7.0.4 Fortinet FortiCamera versions 7.6.0...
Fortinet FortiOS Security Fabric 安全漏洞
Fortinet FortiOS Security Fabric is a network security platform from Fortinet, Inc. A security vulnerability exists in Fortinet FortiOS Security Fabric versions 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2 all, 7.0 all, and 6.4 all, which stems from an improper assignment of privileges and could...
CVE-2025-49813: Improper Neutralization of Special Elements used in an OS Command
An improper neutralization of special elements used in an OS Command "OS Command Injection" vulnerability CWE-78 in Fortinet FortiADC version 7.2.0 and before 7.1.1 allows a remote and authenticated attacker with low privilege to execute unauthorized code via specifically crafted HTTP parameters...
The vulnerability of Fortinet FortiClient Windows security devices, which stems from the use of a strictly encrypted cryptographic key, allows attackers to gain unauthorized access to protected information.
The vulnerability of Fortinet FortiClient Windows protection lies in the use of a strictly encrypted cryptographic key. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the FortiMail email security system, a software-hardware solution for information protection based on AI and deep neural networks from Fortinet’s FortiNDR (Network Detection and Response), arises from the possibility of copying buffers without checking the size of the input data. This allows attackers to execute arbitrary code.
The vulnerability of the FortiMail email security system, a software-hardware solution for information protection based on AI and deep neural networks from Fortinet, is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker...
PT-2025-32349 · Undefined · Undefined
CVE-2025-55023 - Fortinet SSL/TLS Weakness CVE ID : CVE-2025-55023 Published : Aug. 6, 2025, 4:16 a.m. | 2 hours, 19 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
The vulnerability of Fortinet FortiOS operating systems, related to operations beyond the buffer in memory, allows attackers to cause a malfunction of the FGFM daemon.
The vulnerability of Fortinet FortiOS operating systems lies in the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to trigger a malfunction of the FGFM daemon using a specially created request...
The vulnerability of Fortinet FortiOS operating systems, related to integer overflows, allows attackers to cause crashes in the csfd daemon.
The vulnerability of Fortinet FortiOS operating systems is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to trigger a crash of the csfd daemon through a specially crafted request...
Fortinet FortiIsolator Access Control Error Vulnerability
Fortinet FortiIsolator is a Fortinet application that provides remote security isolation for browsers. The application adds additional advanced threat protection capabilities to the Fortinet Security Fabric and protects business-critical data from sophisticated threats on the Web. Content and fil...
Exploit for Improper Access Control in Fortinet Forticlient
CVE-2024-40586 Windows Coerced Authentication in FortiClient...
Fortinet FortiWeb Fabric Connector SQL Injection
Fortinet FortiWeb 7.0.x 7.0.11, 7.2.x 7.2.11, 7.4.x 7.4.8, 7.6.x 7.6.4 is vulnerable to a pre-authentication SQL injection that can lead to remote code execution. By leveraging this vulnerability, a remote and unauthenticated attacker can inject malicious SQL queries into the FortiWeb Fabric...
The vulnerability of the graphical interface of the Fortinet FortiSOAR software for coordinating the operation of cybersecurity systems and for managing real-time incident responses allows attackers to gain unauthorized access to protected information.
The vulnerability of the graphical interface of the software platform for coordinating the operation of cybersecurity systems and for managing real-time incident responses in Fortinet FortiSOAR is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability can...