GCVE - cpe:2.3:a:fortinet,_inc.:fortinet_fortios:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet,_inc.:fortinet_fortios:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Fortinet, Inc. (`773fb5aa-3c05-572f-a299-a4d7a511c4a7`)
Product	Fortinet Fortios (`e2696745-c5ea-536e-8ba2-bac94133f015`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-13376`	vulnerable	2026-06-08 05:10:51.211086	Details available An uninitialized memory buffer leak exists in Fortinet FortiOS 5.6.1 to 5.6.3, 5.4.6 to 5.4.7, 5.2 all versions under web proxy's disclaimer response web pages, potentially causing sensitive data to be displayed in the HTTP response. Published: 2018-11-27T15:00:00.000Z Updated: 2024-10-25T14:31:22.847Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/106036 https://herolab.usd.de/wp-content/uploads/sites/4/2018/12/usd20180031.txt https://fortiguard.com/advisory/FG-IR-18-325	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-7735`	vulnerable	2026-06-08 05:10:05.996657	Details available A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.2.0 through 5.2.11 and 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via the "Groups" input while creating or editing User Groups. Published: 2017-09-12T02:00:00.000Z Updated: 2024-10-25T14:11:52.628Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1038705 https://fortiguard.com/advisory/FG-IR-17-127 http://www.securityfocus.com/bid/99098	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-7734`	vulnerable	2026-06-08 05:10:05.995880	Details available A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via 'Comments' while saving Config Revisions. Published: 2017-09-12T02:00:00.000Z Updated: 2024-10-25T14:12:09.829Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1038705 https://fortiguard.com/advisory/FG-IR-17-127 http://www.securityfocus.com/bid/99098	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-3133`	vulnerable	2026-06-08 05:09:26.531849	Details available A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to execute unauthorized code or commands via the Replacement Message HTML for SSL-VPN. Published: 2017-09-12T02:00:00.000Z Updated: 2024-10-25T14:12:25.502Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/100009 http://www.securitytracker.com/id/1039020 https://fortiguard.com/advisory/FG-IR-17-104 https://www.exploit-db.com/exploits/42388/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-3132`	vulnerable	2026-06-08 05:09:26.529802	Details available A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to Execute unauthorized code or commands via the action input during the activation of a FortiToken. Published: 2017-09-12T02:00:00.000Z Updated: 2024-10-25T14:12:36.355Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/100009 http://www.securitytracker.com/id/1039020 https://fortiguard.com/advisory/FG-IR-17-104 https://www.exploit-db.com/exploits/42388/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-3131`	vulnerable	2026-06-08 05:09:26.529018	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-3130`	vulnerable	2026-06-08 05:09:26.522233	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.