GCVE - cpe:2.3:o:fortinet:fortios:5.0.10:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:fortinet:fortios:5.0.10:*:*:*:*:*:*:*

part: o version: 5.0.10 update: *

Vendor	Fortinet (`2b06c5e0-0a17-54f4-810a-5ef236d51947`)
Product	Fortios (`61cd023c-b8ba-5b41-89bb-a7c3ba2858f7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-25610`	vulnerable	2026-06-08 05:56:09.470877	Details available CRITICAL (9.3) A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0 through 6.4.11 and version 6.2.12 and below, FortiProxy version 7.2.0 through 7.2.2, version 7.0.0 through 7.0.8, version 2.0.12 and below and FortiOS-6K7K version 7.0.5, version 6.4.0 through 6.4.10 and version 6.2.0 through 6.2.10 and below allows a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests. Published: 2025-03-24T15:39:48.167Z Updated: 2025-03-24T18:42:44.673Z Open on db.gcve.eu Reference links https://fortiguard.com/psirt/FG-IR-23-001	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-42757`	vulnerable	2026-06-08 05:35:22.641141	Details available MEDIUM (6.3) A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authenticated local attacker to achieve arbitrary code execution via specially crafted command line arguments. Published: 2021-12-08T11:01:11.000Z Updated: 2025-10-16T09:46:26.239Z Open on db.gcve.eu Reference links https://fortiguard.com/advisory/FG-IR-21-173	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-3130`	vulnerable	2026-06-08 05:09:26.522469	Details available An information disclosure vulnerability in Fortinet FortiOS 5.6.0, 5.4.4 and below versions allows attacker to get FortiOS version info by inspecting FortiOS IKE VendorID packets. Published: 2017-08-10T21:00:00.000Z Updated: 2024-10-25T14:33:41.905Z Open on db.gcve.eu Reference links https://fortiguard.com/advisory/FG-IR-17-073 http://www.securityfocus.com/bid/100211	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-3128`	vulnerable	2026-06-08 05:09:26.515203	Details available A stored XSS (Cross-Site-Scripting) vulnerability in Fortinet FortiOS allows attackers to execute unauthorized code or commands via the policy global-label parameter. Published: 2017-05-23T17:00:00.000Z Updated: 2024-10-25T14:35:09.293Z Open on db.gcve.eu Reference links https://fortiguard.com/psirt/FG-IR-17-057 http://www.securitytracker.com/id/1038541 http://www.securityfocus.com/bid/98514	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-7541`	vulnerable	2026-06-08 05:08:12.968590	Details available Long lived sessions in Fortinet FortiGate devices with FortiOS 5.x before 5.4.0 could violate a security policy during IPS signature updates when the FortiGate's IPSengine is configured in flow mode. All FortiGate versions with IPS configured in proxy mode (the default mode) are not affected. Published: 2017-03-30T14:00:00.000Z Updated: 2024-10-25T14:35:50.321Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/94477 http://fortiguard.com/advisory/FG-IR-16-088	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-3978`	vulnerable	2026-06-08 05:07:46.348325	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-2323`	vulnerable	2026-06-08 05:06:28.025396	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.