Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:fortios:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947)
ProductFortios (61cd023c-b8ba-5b41-89bb-a7c3ba2858f7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-25815 vulnerable 2026-06-08 07:53:20.517747 Details available
LOW (3.2)
Fortinet FortiOS through 7.6.6 allows attackers to decrypt LDAP credentials stored in device configuration files, as exploited in the wild from 2025-12-16 through 2026 (by default, the encryption key is the same across all customers' installations). NOTE: the Supplier's position is that the instance of CWE-1394 is not a vulnerability because customers "are supposed to enable" a non-default option that eliminates the weakness. However, that non-default option can disrupt functionality as shown in the "Managing FortiGates with private data encryption" document, and is therefore intentionally not a default option.
Published: 2026-02-05T21:14:09.241Z
Updated: 2026-02-09T19:31:50.964Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-36505 vulnerable 2026-06-08 06:39:45.260249 Details available
MEDIUM (4.7)
An improper access control vulnerability [CWE-284] in FortiOS 7.4.0 through 7.4.3, 7.2.5 through 7.2.7, 7.0.12 through 7.0.14 and 6.4.x may allow an attacker who has already successfully obtained write access to the underlying system (via another hypothetical exploit) to bypass the file integrity checking system.
Published: 2024-08-13T15:51:56.981Z
Updated: 2024-08-15T14:16:57.399Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26015 vulnerable 2026-06-08 06:31:24.647782 Details available
LOW (3.1)
An incorrect parsing of numbers with different radices vulnerability [CWE-1389] in FortiProxy version 7.4.3 and below, version 7.2.10 and below, version 7.0.17 and below and FortiOS version 7.4.3 and below, version 7.2.8 and below, version 7.0.15 and below IP address validation feature may permit an unauthenticated attacker to bypass the IP blocklist via crafted requests.
Published: 2024-07-09T15:33:30.260Z
Updated: 2024-08-01T23:59:31.104Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26010 vulnerable 2026-06-08 06:31:24.502407 Details available
MEDIUM (6.7)
A stack-based buffer overflow in Fortinet FortiPAM version 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiWeb, FortiAuthenticator, FortiSwitchManager version 7.2.0 through 7.2.3, 7.0.1 through 7.0.3, FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0.0 through 7.0.14, 6.4.0 through 6.4.15, 6.2.0 through 6.2.16, 6.0.0 through 6.0.18, FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through 7.2.9, 7.0.0 through 7.0.15, 2.0.0 through 2.0.13, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7 allows attacker to execute unauthorized code or commands via specially crafted packets.
Published: 2024-06-11T14:32:03.697Z
Updated: 2025-08-27T20:42:53.674Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26007 vulnerable 2026-06-08 06:31:24.340632 Details available
MEDIUM (5)
An improper check or handling of exceptional conditions vulnerability [CWE-703] in Fortinet FortiOS version 7.4.1 allows an unauthenticated attacker to provoke a denial of service on the administrative interface via crafted HTTP requests.
Published: 2024-05-14T16:19:08.407Z
Updated: 2024-08-01T23:52:06.449Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23662 vulnerable 2026-06-08 06:29:40.127663 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23113 vulnerable 2026-06-08 06:29:36.321681 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23112 vulnerable 2026-06-08 06:29:36.318982 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23111 vulnerable 2026-06-08 06:29:36.312408 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23110 vulnerable 2026-06-08 06:29:36.308347 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21762 vulnerable 2026-06-08 06:27:36.527711 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21754 vulnerable 2026-06-08 06:27:36.467258 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48784 vulnerable 2026-06-08 06:14:28.054958 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47536 vulnerable 2026-06-08 06:14:24.843075 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46720 vulnerable 2026-06-08 06:14:23.030483 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46717 vulnerable 2026-06-08 06:14:22.934702 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46714 vulnerable 2026-06-08 06:14:22.847001 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45586 vulnerable 2026-06-08 06:12:42.835827 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45583 vulnerable 2026-06-08 06:12:42.766644 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44250 vulnerable 2026-06-08 06:12:39.709761 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42789 vulnerable 2026-06-08 06:11:09.396360 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41841 vulnerable 2026-06-08 06:11:07.159708 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41678 vulnerable 2026-06-08 06:11:06.385525 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41677 vulnerable 2026-06-08 06:11:06.384781 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41675 vulnerable 2026-06-08 06:11:06.382851 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37935 vulnerable 2026-06-08 06:08:16.422856 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-36641 vulnerable 2026-06-08 06:08:12.800052 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-36640 vulnerable 2026-06-08 06:08:12.799075 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-36639 vulnerable 2026-06-08 06:08:12.779143 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-36555 vulnerable 2026-06-08 06:08:12.279465 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33308 vulnerable 2026-06-08 06:06:22.288094 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33307 vulnerable 2026-06-08 06:06:22.287465 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33306 vulnerable 2026-06-08 06:06:22.286945 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33305 vulnerable 2026-06-08 06:06:22.283547 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33301 vulnerable 2026-06-08 06:06:22.208464 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29183 vulnerable 2026-06-08 06:02:39.013684 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29182 vulnerable 2026-06-08 06:02:39.013035 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29181 vulnerable 2026-06-08 06:02:39.012374 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29180 vulnerable 2026-06-08 06:02:39.007243 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29179 vulnerable 2026-06-08 06:02:39.006458 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29178 vulnerable 2026-06-08 06:02:39.005179 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28001 vulnerable 2026-06-08 05:57:42.759492 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27997 vulnerable 2026-06-08 05:57:42.742418 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26207 vulnerable 2026-06-08 05:57:38.792707 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22641 vulnerable 2026-06-08 05:54:26.666378 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22640 vulnerable 2026-06-08 05:54:26.662771 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22639 vulnerable 2026-06-08 05:54:26.658143 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45862 vulnerable 2026-06-08 05:50:37.417243 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45861 vulnerable 2026-06-08 05:50:37.410621 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43953 vulnerable 2026-06-08 05:49:35.063892 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43947 vulnerable 2026-06-08 05:49:35.052317 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-42476 vulnerable 2026-06-08 05:49:30.070256 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-42475 vulnerable 2026-06-08 05:49:30.053993 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-42474 vulnerable 2026-06-08 05:49:30.048884 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-42472 vulnerable 2026-06-08 05:49:30.039336 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-42469 vulnerable 2026-06-08 05:49:30.027101 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41335 vulnerable 2026-06-08 05:48:30.272638 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41334 vulnerable 2026-06-08 05:48:30.270753 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41330 vulnerable 2026-06-08 05:48:30.264716 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41329 vulnerable 2026-06-08 05:48:30.264306 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41328 vulnerable 2026-06-08 05:48:30.263724 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41327 vulnerable 2026-06-08 05:48:30.261845 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40680 vulnerable 2026-06-08 05:48:27.890031 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-39948 vulnerable 2026-06-08 05:47:18.968857 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38378 vulnerable 2026-06-08 05:47:16.248027 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35843 vulnerable 2026-06-08 05:46:05.850543 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29054 vulnerable 2026-06-08 05:42:46.378909 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22302 vulnerable 2026-06-08 05:40:08.148852 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-43074 vulnerable 2026-06-08 05:35:23.215900 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-9195 vulnerable 2026-06-08 05:12:07.931586 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13367 vulnerable 2026-06-08 05:10:51.194987 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7738 vulnerable 2026-06-08 05:10:06.012391 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17544 vulnerable 2026-06-08 05:09:09.569871 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-7542 vulnerable 2026-06-08 05:08:12.979275 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-7541 vulnerable 2026-06-08 05:08:12.962568 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.