An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet F…

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS versi…

A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.…

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting F…

A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, versio…

An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and …

A out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.…

Fortinet FortiAnalyzer before 5.0.12 and 5.2.x before 5.2.5; FortiSwitch 3.3.x before 3.3.3; Fo…

A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 thro…

A Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, …

A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, …

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerabili…

Buffer overflow in the Cookie parser in Fortinet FortiOS 4.x before 4.1.11, 4.2.x before 4.2.13…

An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and…

A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to…

A heap buffer overflow in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.10, 5.4.0 thr…

An improper access control [CWE-284] vulnerability in FortiOS version 7.2.0 and versions 7.0.0 …

A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the s…

A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Forti…

Cross-site scripting (XSS) vulnerability in the sslvpn login page in Fortinet FortiOS 5.2.x bef…

A improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet Fo…

A improper limitation of a pathname to a restricted directory vulnerability ('path traversal') …

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows atta…

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows atta…

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 and 5.6.0…

The Web User Interface (WebUI) in FortiOS 5.0.x before 5.0.13, 5.2.x before 5.2.3, and 5.4.x be…

Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup …

The FortiManager protocol service in Fortinet FortiOS before 4.3.16 and 5.0.0 before 5.0.8 on F…

A Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, …

A use of password hash with insufficient computational effort vulnerability [CWE-916] affecting…

FortiOS 5.2.3, when configured to use High Availability (HA) and the dedicated management inter…

A out-of-bounds write in Fortinet FortiOS 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0.0 throu…

Interpretation conflict in Fortinet FortiGate 2.8, running FortiOS 2.8MR10 and v3beta, allows r…

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting F…

The FTP component in FortiGate 2.8 running FortiOS 2.8MR10 and v3beta, and other versions befor…

A null pointer dereference in Fortinet FortiOS version 7.2.0 through 7.2.4, 7.0.0 through 7.0.1…

A null pointer dereference in Fortinet FortiOS version 7.2.0 through 7.2.4, 7.0.0 through 7.0.1…

Cross-site scripting (XSS) vulnerability in firewall/schedule/recurrdlg in Fortinet FortiOS 5.0…

Multiple cross-site request forgery (CSRF) vulnerabilities in Fortinet FortiOS on FortiGate fir…

An information disclosure vulnerability in Fortinet FortiOS 6.0.0 and below versions reveals us…