İçeriğe atla
Noroxi

fortinet kayıtları

fortinet üreticisine ait 1.142 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
30 · %2,6
Silahlaştırılmış
33 · %2,9
Pre-auth RCE
45
Düzeltme kaydı olan
%0,8
Yayından KEV’e ortanca
10 gün

Yıllara göre kayıt

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 22
  8. 23
  9. 24
  10. 25
  11. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

1.142 kayıt
  • CVE-2018-13379
    99Hemen

    An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    fortinet · fortiproxy4 Haz 2019

  • CVE-2022-40684
    99Hemen

    An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    fortinet · fortiproxy18 Eki 2022

  • CVE-2025-25257
    99Hemen

    An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet For

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    fortinet · fortiweb17 Tem 2025

  • CVE-2022-42475
    99Hemen

    A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    fortinet · fortios2 Oca 2023

  • CVE-2023-48788
    99Hemen

    A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %98

    fortinet · forticlient enterprise management server12 Mar 2024

  • CVE-2024-47575
    97Hemen

    A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, Fo

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %95

    fortinet · fortimanager23 Eki 2024

  • CVE-2024-55591
    97Hemen

    An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 through 7.0.16 and Forti

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %94

    fortinet · fortiproxy14 Oca 2025

  • CVE-2026-21643
    97Hemen

    An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may a

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %94

    fortinet · forticlientems6 Şub 2026

  • CVE-2025-64446
    97Hemen

    A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %92

    fortinet · fortiweb14 Kas 2025

  • CVE-2026-24858
    95Hemen

    An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %86

    fortinet · fortianalyzer27 Oca 2026

  • CVE-2023-27997
    95Hemen

    A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6.4.12 and below,

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %86

    fortinet · fortiproxy13 Haz 2023

  • CVE-2024-21762
    94Hemen

    A out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %83

    fortinet · fortiproxy9 Şub 2024

  • CVE-2026-25089
    92Hemen

    A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 5.0.0 th

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %76

    fortinet · fortisandbox9 Haz 2026

  • CVE-2025-59718
    89Hemen

    A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, Forti

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %68

    fortinet · fortiproxy9 Ara 2025

  • CVE-2024-23113
    88Hemen

    A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, Fo

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %62

    fortinet · fortiproxy15 Şub 2024

  • CVE-2018-13382
    85Hemen

    An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5.4.1 to 5.4.10 and FortiProxy 2.0.0, 1.2.0 t

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %82

    fortinet · fortiproxy4 Haz 2019

  • CVE-2020-12812
    84Hemen

    An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below may result in a user being able to log

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %49

    fortinet · fortios24 Tem 2020

  • CVE-2026-39808
    83Hemen

    A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 th

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %47

    fortinet · fortisandbox14 Nis 2026

  • CVE-2025-32756
    78Bu hafta

    A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all version

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %30

    fortinet · fortimail13 May 2025

  • CVE-2025-58034
    75Bu hafta

    An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortin

    YüksekCVSS 7,2KEVSilahlaştırılmışEPSS %56

    fortinet · fortiweb18 Kas 2025

  • CVE-2026-35616
    72Bu hafta

    A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unau

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %9

    fortinet · forticlientems3 Nis 2026

  • CVE-2025-25249
    70Bu hafta

    A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.1

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %4

    fortinet · fortios13 Oca 2026

  • CVE-2022-39952
    69Bu hafta

    A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11,

    KritikCVSS 9,8SilahlaştırılmışEPSS %100

    fortinet · fortinac16 Şub 2023

  • CVE-2018-13383
    66Bu hafta

    A heap buffer overflow in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.10, 5.4.0 through 5.4.12, 5.2.14 and earlier and FortiProx

    OrtaCVSS 6,5KEVSilahlaştırılmışEPSS %34

    fortinet · fortiproxy29 May 2019

  • CVE-2025-24472
    64Bu hafta

    An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS 7.0.0 through 7.0.16 and FortiProxy 7.

    YüksekCVSS 8,1KEVSilahlaştırılmışEPSS %7

    fortinet · fortiproxy11 Şub 2025