Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:fortinet_fortios:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947)
ProductFortinet Fortios (ecd79954-6a78-56d4-bcee-6f4efda42378)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-38380 vulnerable 2026-06-08 05:47:16.253421 Details available
MEDIUM (4.3)
An improper access control [CWE-284] vulnerability in FortiOS version 7.2.0 and versions 7.0.0 through 7.0.7 may allow a remote authenticated read-only user to modify the interface settings via the API.
Published: 2022-11-02T00:00:00.000Z
Updated: 2024-10-22T20:52:46.827Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35842 vulnerable 2026-06-08 05:46:05.846612 Details available
LOW (3.7)
An exposure of sensitive information to an unauthorized actor vulnerabiltiy [CWE-200] in FortiOS SSL-VPN versions 7.2.0, versions 7.0.0 through 7.0.6 and versions 6.4.0 through 6.4.9 may allow a remote unauthenticated attacker to gain information about LDAP and SAML settings configured in FortiOS.
Published: 2022-11-02T00:00:00.000Z
Updated: 2024-10-22T20:52:55.632Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30307 vulnerable 2026-06-08 05:43:37.886040 Details available
LOW (3.9)
A key management error vulnerability [CWE-320] affecting the RSA SSH host key in FortiOS 7.2.0 and below, 7.0.6 and below, 6.4.9 and below may allow an unauthenticated attacker to perform a man in the middle attack.
Published: 2022-11-02T00:00:00.000Z
Updated: 2024-10-22T20:53:14.268Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29053 vulnerable 2026-06-08 05:42:46.375522 Details available
LOW (2.3)
A missing cryptographic steps vulnerability [CWE-325] in the functions that encrypt the keytab files in FortiOS version 7.2.0, 7.0.0 through 7.0.5 and below 7.0.0 may allow an attacker in possession of the encrypted file to decipher it.
Published: 2022-09-06T15:10:19.000Z
Updated: 2024-10-22T20:54:37.001Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27491 vulnerable 2026-06-08 05:41:55.344331 Details available
MEDIUM (6.8)
A improper verification of source of a communication channel in Fortinet FortiOS with IPS engine version 7.201 through 7.214, 7.001 through 7.113, 6.001 through 6.121, 5.001 through 5.258 and before 4.086 allows a remote and unauthenticated attacker to trigger the sending of "blocked page" HTML data to an arbitrary victim via crafted TCP requests, potentially flooding the victim.
Published: 2022-09-06T15:10:10.000Z
Updated: 2024-10-22T20:54:44.887Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23442 vulnerable 2026-06-08 05:40:57.536517 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23438 vulnerable 2026-06-08 05:40:57.109447 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22306 vulnerable 2026-06-08 05:40:08.168081 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44171 vulnerable 2026-06-08 05:36:45.074857 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44168 vulnerable 2026-06-08 05:36:45.071458 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-43080 vulnerable 2026-06-08 05:36:42.223149 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-41032 vulnerable 2026-06-08 05:35:19.527209 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-41024 vulnerable 2026-06-08 05:35:19.499891 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-41019 vulnerable 2026-06-08 05:35:19.483129 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-36173 vulnerable 2026-06-08 05:32:49.845178 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-36169 vulnerable 2026-06-08 05:32:49.837436 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32600 vulnerable 2026-06-08 05:32:07.637960 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26109 vulnerable 2026-06-08 05:30:41.995913 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26108 vulnerable 2026-06-08 05:30:41.995237 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26103 vulnerable 2026-06-08 05:30:41.977722 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24018 vulnerable 2026-06-08 05:30:03.475465 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24012 vulnerable 2026-06-08 05:30:03.471253 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15938 vulnerable 2026-06-08 05:19:27.210895 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15937 vulnerable 2026-06-08 05:19:27.210439 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15936 vulnerable 2026-06-08 05:19:27.209044 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12818 vulnerable 2026-06-08 05:17:59.348292 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6696 vulnerable 2026-06-08 05:14:12.985016 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5591 vulnerable 2026-06-08 05:14:07.768795 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5588 vulnerable 2026-06-08 05:14:07.763694 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5587 vulnerable 2026-06-08 05:14:07.763095 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5586 vulnerable 2026-06-08 05:14:07.761542 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15703 vulnerable 2026-06-08 05:12:57.828761 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-9185 vulnerable 2026-06-08 05:12:07.915631 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13384 vulnerable 2026-06-08 05:10:51.220148 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13366 vulnerable 2026-06-08 05:10:51.191442 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13365 vulnerable 2026-06-08 05:10:51.189432 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7733 vulnerable 2026-06-08 05:10:05.990395 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-3128 vulnerable 2026-06-08 05:09:26.508339 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14182 vulnerable 2026-06-08 05:08:49.456250 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.