Fortinet FortiOS 5.0.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:fortinet:fortios:5.0.0:*:*:*:*:*:*:*

part: o version: 5.0.0 update: *

VendorFortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947)
ProductFortios (61cd023c-b8ba-5b41-89bb-a7c3ba2858f7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-25610 vulnerable 2026-06-08 05:56:09.478991 Details available
CRITICAL (9.3)
A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0 through 6.4.11 and version 6.2.12 and below, FortiProxy version 7.2.0 through 7.2.2, version 7.0.0 through 7.0.8, version 2.0.12 and below and FortiOS-6K7K version 7.0.5, version 6.4.0 through 6.4.10 and version 6.2.0 through 6.2.10 and below allows a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.
Published: 2025-03-24T15:39:48.167Z
Updated: 2025-03-24T18:42:44.673Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42757 vulnerable 2026-06-08 05:35:22.650670 Details available
MEDIUM (6.3)
A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authenticated local attacker to achieve arbitrary code execution via specially crafted command line arguments.
Published: 2021-12-08T11:01:11.000Z
Updated: 2025-10-16T09:46:26.239Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-3130 vulnerable 2026-06-08 05:09:26.522281 Details available
An information disclosure vulnerability in Fortinet FortiOS 5.6.0, 5.4.4 and below versions allows attacker to get FortiOS version info by inspecting FortiOS IKE VendorID packets.
Published: 2017-08-10T21:00:00.000Z
Updated: 2024-10-25T14:33:41.905Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-3128 vulnerable 2026-06-08 05:09:26.508954 Details available
A stored XSS (Cross-Site-Scripting) vulnerability in Fortinet FortiOS allows attackers to execute unauthorized code or commands via the policy global-label parameter.
Published: 2017-05-23T17:00:00.000Z
Updated: 2024-10-25T14:35:09.293Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-7541 vulnerable 2026-06-08 05:08:12.963389 Details available
Long lived sessions in Fortinet FortiGate devices with FortiOS 5.x before 5.4.0 could violate a security policy during IPS signature updates when the FortiGate's IPSengine is configured in flow mode. All FortiGate versions with IPS configured in proxy mode (the default mode) are not affected.
Published: 2017-03-30T14:00:00.000Z
Updated: 2024-10-25T14:35:50.321Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3978 vulnerable 2026-06-08 05:07:46.342678 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1909 vulnerable 2026-06-08 05:07:32.293168 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2323 vulnerable 2026-06-08 05:06:28.018145 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2216 vulnerable 2026-06-08 05:05:27.952873 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0351 vulnerable 2026-06-08 05:05:12.655141 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.