PT-2025-2453 · Fortinet · Fortios

Name of the Vulnerable Software and Affected Versions: FortiOS SSLVPN web portal versions 6.4 through 7.0, versions 7.2.0 through 7.2.8, and versions 7.4.0 through 7.4.4 Description: The issue is related to an out-of-bounds read vulnerability that may allow an authenticated attacker to perform a...

PT-2025-1192

Name of the Vulnerable Software and Affected Versions Fortinet FortiPortal versions 6.0.0 through 6.0.15 Fortinet FortiManager versions 6.4.0 through 6.4.14 Fortinet FortiManager versions 7.0.0 through 7.0.12 Fortinet FortiManager versions 7.2.0 through 7.2.5 Fortinet FortiManager versions 7.4.0...

Fortinet FortiOS 缓冲区错误漏洞

Fortinet FortiOS is a set of security operating system dedicated to the FortiGate network security platform from the U.S. company Fiat Fortinet. The system provides users with a variety of security features such as firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam. A buffer...

PT-2025-2440

Name of the Vulnerable Software and Affected Versions: Fortinet FortiDeceptor versions 3.x through 5.3.0 Description: The issue is related to an improper neutralization of input during web page generation, also known as 'cross-site scripting'. This may allow an attacker to perform a reflected...

PT-2025-1188

Name of the Vulnerable Software and Affected Versions FortiAnalyzer versions 7.4.1 through 7.4.3 FortiAnalyzer versions 7.6.0 through 7.6.1 FortiAnalyzer Cloud versions 7.4.1 through 7.4.3 FortiManager versions 7.4.1 through 7.4.3 FortiManager versions 7.6.0 through 7.6.1 FortiManager Cloud...

Fortinet FortiSandbox 操作系统命令注入漏洞

Fortinet FortiSandbox is an APT Advanced Persistent Threat protection appliance from Fortinet. The appliance offers dual sandboxing technology, dynamic threat intelligence system, real-time control panel and reporting. Fortinet FortiSandbox suffers from an operating system command injection...

Fortinet FortiManager和FortiAnalyzer 安全漏洞

Fortinet FortiManager and Fortinet FortiAnalyzer are both products of Fortinet, Inc. Fortinet FortiManager is a centralized network security management platform. The platform supports centralized management of any number of Fortinet devices, and can be grouped into different management domains AD...

Fortinet FortiClientEMS 安全漏洞

Fortinet FortiClientEMS is part of Fortinet's Endpoint Management solution from Fortinet, a U.S.-based company, and is designed to help organizations effectively manage endpoint devices in their networks and provide monitoring and control of endpoint security. An input validation error...

PT-2025-1051

Name of the Vulnerable Software and Affected Versions FortiOS versions 7.0.0 through 7.0.16 FortiProxy versions 7.0.0 through 7.0.19 and 7.2.0 through 7.2.12 Description An authentication bypass vulnerability in FortiOS and FortiProxy allows a remote attacker to gain super-admin privileges via...

Fortinet FortiClientEMS和FortiSOAR 安全漏洞

Fortinet FortiSOAR and Fortinet FortiClientEMS are both products of Fortinet, Inc.Fortinet FortiSOAR is a Security Orchestration, Automation, and Response SOAR solution.Fortinet FortiClientEMS is part of Fortinet's offering of endpoint management solutions designed to help organizations effective...

Fortinet FortiRecorder 安全漏洞

Fortinet FortiRecorder is a Web-based network video recorder management system from Fortinet, Inc. A security vulnerability exists in Fortinet FortiRecorder that stems from incorrectly restricting pathnames to restricted directories, resulting in a path traversal vulnerability. A privileged...

Fortinet FortiClient CVE-2023-4863 - Heap overflow in Chrome/libwebp (FG-IR-23-381)

The version of FortiClient installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-23-381 advisory. - Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to...

Fortinet FortiClient CVE-2023-4863 - Heap overflow in Chrome/libwebp (FG-IR-23-381) (macOS)

The version of FortiClient installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-23-381 advisory. - Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to...

Fortinet Fortigate File-Filter Bypass in Explicit Web Proxy Policy (FG-IR-24-282)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-282 advisory. - An improper neutralization of crlf sequences in http headers 'http response splitting' in Fortinet FortiOS 7.2.0 through...

Fortinet Fortigate Out of bounds read in ipsec ike (FG-IR-24-266)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-266 advisory. - An Out-of-bounds Read vulnerability CWE-125 in FortiOS version 7.6.0, version 7.4.4 and below, version 7.2.9 and below and...

Fortinet FortiWeb Path traversal in csfd daemon (FG-IR-24-259)

The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the FG-IR-24-259 advisory. - A improper limitation of a pathname to a restricted directory 'path traversal' in Fortinet FortiRecorder versions...

Fortinet Fortigate SSLVPN DOS (FG-IR-23-473)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-23-473 advisory. - An out-of-bounds read vulnerability CWE-125 in FortiOS SSLVPN web portal versions 7.4.0 through 7.4.4, versions 7.2.0 throu...

Fortinet FortiRecorder 路径遍历漏洞

Fortinet FortiRecorder is a Web-based network video recorder management system from Fortinet. A path traversal vulnerability exists in Fortinet FortiRecorder that stems from incorrectly restricting path names to restricted directories, resulting in a path traversal vulnerability. A privileged...

Fortinet Fortigate Integer Overflow in ipsec ike (FG-IR-24-267)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-267 advisory. - An Integer Overflow or Wraparound vulnerability CWE-190 in version 7.4.4 and below, version 7.2.10 and below; FortiSASE...

Fortinet FortiClient Hardcoded Encryption Key Used for Named Pipe Communication (FG-IR-24-216)

The version of FortiClient installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-216 advisory. - Threat actors can gain access to a plain text encryption key that is saved as part of the FortiClient services executable...