898 matches found
XSS via back button
...
Request smuggling attack in FortiOS
...
OpenSSL CVE-2025-15467
...
Administrative FortiCloud SSO authentication bypass
...
Heap-based buffer overflow in cw_acd daemon
...
SSRF in GUI console
...
OS command injection in multiple endpoints
...
Insufficient Session Expiration in SSLVPN
...
Reflected XSS in HA cluster
...
Multiple authenticated OS Command Injections via API
...
Insertion of sensitive information into REST API logs
...
OS command injection in GUI backup options
...
Multiple Fortinet Products' FortiCloud SSO Login Authentication Bypass
...
Private key readable by admin
...
Stack buffer overflow in CAPWAP daemon
...
Credential leakage through debug commands
...
Authenticated CLI Commands Buffer Overflow
...
File scan result bypass
...
Trusted hosts bypass via SSH
...
Stack buffer overflow in CAPWAP daemon
...
FGFM protocol allows unauthenticated reset of the connection
...
Heap buffer overflow in websocket
...
Weak authentication in WAD/GUI
...
Restricted CLI command bypass
...
Open Redirect and XSS in Web Filter warning page
...
Domain fronting protection bypass in explicit web proxy
...
Missing authentication check in OFTP service
...
Race condion in FortiCloud SSO SAML authentication
...
Improper autorization over static files
...
Stack-based buffer overflow on fortitoken import feature
...
Heap Overflow in fgfmsd
...
Insufficient Session Expiration in SSLVPN using SAML authentication
...
Insertion of Sensitive 2FA Information in logs and debug command
...
Insertion of Sensitive Information Into Sent Data Vulnerability in csfd daemon
...
ZTNA Server Improper Certificate Validation
...
Multiple Unchecked Return Value leading to Null Pointer Dereference
...
Authenticated Heap Overflow in SSL-VPN bookmarks
...
Incorrect Privilege Assignment in Security Fabric
...
Arbitrary file overwrite in FGFMd
...
Integer Overflow on SSL-VPN bookmarks
...
Weak authentication - FGFM protocol
...
Double free in automation-stitch
...
DNS type 65 resource record requests bypass DNS filter
...
Session still active for deleted admin
...
PKI via API: Authentication granted with an invalid certificate
...
SQL injection in forward module
...
Heap-based buffer overflow in cw_stad daemon
...
Buffer overflow in fgfmd
...