6435 matches found
Fortinet Fortigate DoS in Security Fabric Root (FG-IR-24-388)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-388 advisory. - An integer overflow or wraparound vulnerability CWE-190 in FortiOS Security Fabric may allow a remote unauthenticated...
PT-2025-21131 · Fortinet · Fortiproxy +2
Name of the Vulnerable Software and Affected Versions: Fortinet FortiProxy versions 7.6.0 through 7.6.1 FortiSwitchManager version 7.2.5 FortiOS versions 7.4.4 through 7.4.6 and version 7.6.0 Description: A missing authentication for critical functions in Fortinet products may allow an attacker...
Fortinet Fortigate Buffer over-read in FGFM (FG-IR-24-381)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-381 advisory. - A buffer over-read vulnerability CWE-126 in FortiOS may allow a remote unauthenticated attacker to crash the FGFM daemon vi...
The server for managing Fortinet FortiClient Enterprise Management Server is vulnerable. This vulnerability stems from the lack of security measures taken to protect the website structure, allowing attackers to send messages containing JavaScript code.
The vulnerability of the Fortinet FortiClient Enterprise Management Server EMS server exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to send messages containing JavaScript code via a specially created link...
The vulnerability of Fortinet’s software products lies in the insufficient restriction of communication channels for specific endpoints, which allows attackers to carry out MITM attacks.
The vulnerability of Fortinet software products is related to insufficient restrictions on communication channels for specified endpoints. Exploiting this vulnerability allows a remote attacker to carry out a Middleware-In-The-Middle MITM attack...
Exploit for Out-of-bounds Write in Fortinet Fortiproxy
fgt-cve-2023-27997-exploit FortiGate SSL‑VPN CVE‑2023‑279...
Fortinet FortiWeb Cross-Site Scripting Vulnerability (CNVD-2025-12796)
Fortinet FortiWeb is a Web application layer firewall from the U.S. company Fita Fortinet, which can block threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks to ensure the security of Web applications and protect sensitive database content...
Fortinet FortiClient Cross-Site Scripting Vulnerability
Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. Fortinet FortiClient suffers from a cross-site scripting...
Fortinet FortiAnalyzer Input Validation Error Vulnerability (CNVD-2025-12793)
Fortinet FortiAnalyzer is a set of centralized network security reporting solutions from the U.S. company Fiat Fortinet. The product is mainly used to collect network log data, and through the reporting suite of security events in the log, network traffic, Web content, etc. to analyze, report,...
Fortinet FortiIsolator Operating System Command Injection Vulnerability
Fortinet FortiIsolator is a Fortinet application that provides remote security isolation for browsers. The application adds additional advanced threat protection capabilities to the Fortinet Security Fabric and protects business-critical data from sophisticated threats on the Web. Content and fil...
Fortinet FortiWeb Path Traversal Vulnerability
Fortinet FortiWeb is a Web application layer firewall from the U.S. company Fita Fortinet, which can block threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks to ensure the security of Web applications and protect sensitive database content. A...
Fortinet FortiSwitch Authorization Issues Vulnerability
Fortinet FortiSwitch is a network switch management tool from Fiat Fortinet. Fortinet FortiSwitch suffers from an authorization issue vulnerability that originates from an unauthenticated password change, which can be exploited by an attacker to cause the administrator password to be tampered wit...
PT-2025-16959
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Fortinet affected versions not specified Description A race condition exists in the Linux kernel within the accel/amdxdna component. When autosuspend is triggered, the rpm on flag is set to indicate...
Fortinet FortiOS_ FortiProxy_ and FortiSwitchManager 7.2.0 - Authentication bypass
Exploit Title: Fortinet FortiOS, FortiProxy, and FortiSwitchManager 7.2.0 - Authentication bypass Date: 2022-10-10 Exploit Author: Zach Hanley, SC Vendor Homepage: https://www.fortinet.com Version: 7.0.0 Tested on: Linux CVE : CVE-2022-40684 This module requires Metasploit:...
The vulnerability of the graphical interface of the Fortinet FortiDeceptor tool for detecting and responding to external and internal security threats allows a perpetrator to execute arbitrary code.
The vulnerability of the graphical interface of the Fortinet FortiDeceptor tool for detecting and responding to external and internal security threats is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute...
The vulnerability of Fortinet FortiOS operating systems stems from authentication mechanism flaws, which allow attackers to gain access to device configuration details and bypass existing security measures.
The vulnerability of Fortinet FortiOS operating systems is related to deficiencies in authentication mechanisms. Exploiting this vulnerability allows a malicious actor to gain access to device configuration information and bypass existing security measures...
Fortinet Issues Fixes After Attackers Bypass Patches to Maintain Access
Hackers exploit Fortinet flaws to plant stealth backdoors on FortiGate devices, maintaining access even after patches. Update to…...
PT-2025-18987 · Undefined · Undefined
Уязвимость операционных систем Fortinet FortiOS связана с недостатками механизма аутентификации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, раскрыть данные о конфигурации устройства и обойти существующие механизмы безопасности...
Fortinet Warns Attackers Retain FortiGate Access Post-Patching via SSL-VPN Symlink Exploit
Fortinet has revealed that threat actors have found a way to maintain read-only access to vulnerable FortiGate devices even after the initial access vector used to breach the devices was patched. The attackers are believed to have leveraged known and now-patched security flaws, including, but not...