Browse CVEs

HIGH 7.5 CVE-2015-2281EPSS 10% Stack-based buffer overflow in collectoragent.exe in Fortinet Single Sign On (FSSO) before build 164 allows remote attackers to execute arbitrary cod… Single Sign On No fix yet Fix from $1,9502015-03-19 MEDIUM 6.9 CVE-2015-1458 Fortinet FortiAuthenticator 3.0.0 allows local users to bypass intended restrictions and gain privileges by creating /tmp/privexec/dbgcore_enable_she… Fortiauthenticator No fix yet Fix from $1,6002015-02-03 HIGH 7.5 CVE-2015-1455 Fortinet FortiAuthenticator 3.0.0 has a password of (1) slony for the slony PostgreSQL user and (2) www-data for the www-data PostgreSQL user, which … Fortiauthenticator No fix yet Fix from $1,9502015-02-03 MEDIUM 5.0 CVE-2015-1453 The qm class in Fortinet FortiClient 5.2.3.091 for Android uses a hardcoded encryption key of FoRtInEt!AnDrOiD, which makes it easier for attackers t… Forticlient after 5.2.3.091 Fix from $1,6002015-02-02 HIGH 7.8 CVE-2015-1452 The Control and Provisioning of Wireless Access Points (CAPWAP) daemon in Fortinet FortiOS 5.0 Patch 7 build 4457 allows remote attackers to cause a … Fortios Mitigation only Fix from $1,9502015-02-02 MEDIUM 6.4 CVE-2014-8582 FortiNet FortiADC-E with firmware 3.1.1 before 4.0.5 and Coyote Point Equalizer with firmware 10.2.0a allows remote attackers to obtain access to arb… Coyote Point Equalizer Firmware Mitigation only Fix from $1,6002014-11-01 MEDIUM 5.4 CVE-2014-0351 The FortiManager protocol service in Fortinet FortiOS before 4.3.16 and 5.x before 5.0.8 on FortiGate devices does not prevent use of anonymous ciphe… Fortios after 4.3.15 Fix from $1,6002014-09-10 HIGH 7.5 CVE-2014-2216EPSS 5% The FortiManager protocol service in Fortinet FortiOS before 4.3.16 and 5.0.0 before 5.0.8 on FortiGate devices allows remote attackers to cause a de… Fortios after 4.3.15 Fix from $1,9502014-08-25 MEDIUM 6.8 CVE-2014-3115 Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration console in Fortinet FortiWeb before 5.2.0 allow remote attackers… Fortiweb after 5.1.4 Fix from $1,6002014-05-08 MEDIUM 6.5 CVE-2014-1957 FortiGuard FortiWeb before 5.0.3 allows remote authenticated users to gain privileges via unspecified vectors. Fortiweb after 5.0.2 Fix from $1,6002014-04-30 MEDIUM 5.0 CVE-2014-1956 CRLF injection vulnerability in FortiGuard FortiWeb before 5.0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response s… Fortiweb after 5.0.2 Fix from $1,6002014-04-30 HIGH 9.0 CVE-2013-6990 FortiGuard FortiAuthenticator before 3.0 allows remote administrators to gain privileges via the command line interface. Fortiauthenticator after 2.2 Fix from $1,9502014-04-30 MEDIUM 6.8 CVE-2013-6826 cgi-bin/module//sysmanager/admin/SYSAdminUserDialog in Fortinet FortiAnalyzer before 5.0.5 does not properly validate the csrf_token parameter, which… Fortianalyzer Firmware after 5.0.4 Fix from $1,6002013-11-20 MEDIUM 5.1 CVE-2013-1414 Multiple cross-site request forgery (CSRF) vulnerabilities in Fortinet FortiOS on FortiGate firewall devices before 4.3.13 and 5.x before 5.0.2 allow… Fortios after 4.3.12 Fix from $1,6002013-07-08 MEDIUM 6.5 CVE-2013-4604 Fortinet FortiOS before 5.0.3 on FortiGate devices does not properly restrict Guest capabilities, which allows remote authenticated users to read, mo… Fortios after 5.0.2 Fix from $1,6002013-06-25 MEDIUM 5.4 CVE-2013-4669 FortiClient before 4.3.5.472 on Windows, before 4.0.3.134 on Mac OS X, and before 4.0 on Android; FortiClient Lite before 4.3.4.461 on Windows; Forti… Forticlient after 4.3.3.445 Fix from $1,6002013-06-25 MEDIUM 5.3 CVE-2012-4948 The default configuration of Fortinet Fortigate UTM appliances uses the same Certification Authority certificate and same private key across differen… Fortigate 1000c Mitigation only Fix from $1,6002012-11-14 HIGH 7.5 CVE-2008-7161EPSS 6% Fortinet FortiGuard Fortinet FortiGate-1000 3.00 build 040075,070111 allows remote attackers to bypass URL filtering via fragmented GET or POST reque… Fortigate 1000 No fix yet Fix from $1,9502009-09-04 HIGH 7.2 CVE-2009-1262 Format string vulnerability in Fortinet FortiClient 3.0.614, and possibly earlier, allows local users to execute arbitrary code via format string spe… Forticlient Mitigation only Fix from $1,9502009-04-07 HIGH 9.3 CVE-2008-5531 Fortinet Antivirus 3.113.0.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by pl… Fortiguard Antivirus Mitigation only Fix from $1,9502008-12-12 HIGH 7.2 CVE-2008-0779 The fortimon.sys device driver in Fortinet FortiClient Host Security 3.0 MR5 Patch 3 and earlier does not properly initialize its DeviceExtension, wh… Forticlient Host Security after 3.0 Fix from $1,9502008-02-14 MEDIUM 5.0 CVE-2006-3222 The FTP proxy module in Fortinet FortiOS (FortiGate) before 2.80 MR12 and 3.0 MR2 allows remote attackers to bypass anti-virus scanning via the Enhan… Fortios Patch available Fix from $1,6002006-06-24 MEDIUM 5.0 CVE-2006-1966 An unspecified Fortinet product, possibly Fortinet28, allows remote attackers to cause a denial of service via a "small synflood" to the SMTP port (T… Fortinet28 No fix yet Fix from $1,6002006-04-21 HIGH 10.0 CVE-2005-3057 The FTP component in FortiGate 2.8 running FortiOS 2.8MR10 and v3beta, and other versions before 3.0 MR1, allows remote attackers to bypass the Forti… Fortios after 3_beta Fix from $1,9502005-12-31 HIGH 7.5 CVE-2005-3058 Interpretation conflict in Fortinet FortiGate 2.8, running FortiOS 2.8MR10 and v3beta, allows remote attackers to bypass the URL blocker via an (1) H… Fortios after 3_beta Fix from $1,9502005-12-31 MEDIUM 5.0 CVE-2005-3400 Multiple interpretation error in Fortinet 2.48.0.0 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ… Fortinet Mitigation only Fix from $1,6002005-11-01 MEDIUM 5.1 CVE-2005-3221 Multiple interpretation error in unspecified versions of Fortinet Antivirus allows remote attackers to bypass virus detection via a malicious executa… Fortinet Antivirus No fix yet Fix from $1,6002005-10-14 HIGH 7.5 CVE-2005-1837 Fortinet firewall running FortiOS 2.x contains a hardcoded username with the password set to the serial number, which allows local users with console… Fortinet Firewall Mitigation only Fix from $1,9502005-06-01