Browse CVEs

MEDIUM 6.1 CVE-2025-58412 A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiADC 8.0.0, FortiADC 7.6.0 through 7.6.… Fortiadc 7.6.4+ Fix from $1,6002025-11-19 MEDIUM 5.5 CVE-2025-59669 A use of hard-coded credentials vulnerability in Fortinet FortiWeb 7.6.0, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all vers… Fortiweb 7.6.1+ Fix from $1,6002025-11-18 HIGH 8.8 CVE-2025-58692 An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] vulnerability in Fortinet FortiVoice 7… Fortivoice 7.0.8 / 7.2.3+ Fix from $1,9502025-11-18 HIGH 7.5 CVE-2025-58413 A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7… Fortios 7.4.9 / 7.6.4+ Fix from $1,9502025-11-18 HIGH 7.2 CVE-2025-58034 KEVEPSS 56% An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortinet FortiW… Fortiweb 7.0.12 / 7.2.12+ Fix from $1,9502025-11-18 HIGH 7.5 CVE-2025-53843 A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7… Fortios 7.4.9 / 7.6.4+ Fix from $1,9502025-11-18 MEDIUM 6.5 CVE-2025-54971 An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiADC 7.4.0, FortiADC 7.2 all versions, FortiADC 7.1 all v… Fortiadc 7.4.3+ Fix from $1,6002025-11-18 MEDIUM 6.0 CVE-2025-54821 An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.11, FortiOS… Fortiproxy 1.6.1 / 7.6.4+ Fix from $1,6002025-11-18 MEDIUM 5.5 CVE-2025-54660 An active debug code vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.10, FortiClientWindows 7.… Forticlient 7.2.11 / 7.4.4+ Fix from $1,6002025-11-18 HIGH 7.8 CVE-2025-46776 A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7… Fortiextender Firmware 7.4.8 / 7.6.3+ Fix from $1,9502025-11-18 HIGH 7.8 CVE-2025-47761 An Exposed IOCTL with Insufficient Access Control vulnerability [CWE-782] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClie… Forticlient 7.2.10 / 7.4.4+ Fix from $1,9502025-11-18 MEDIUM 6.6 CVE-2025-48839 An Out-of-bounds Write vulnerability [CWE-787] in FortiADC 8.0.0, 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2 all versions, 7.1 all versions, 7.0 a… Fortiadc 7.4.8 / 7.6.3+ Fix from $1,6002025-11-18 HIGH 7.8 CVE-2025-46373 A Heap-based Buffer Overflow vulnerability [CWE-122] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 throu… Forticlient 7.2.9 / 7.4.4+ Fix from $1,9502025-11-18 MEDIUM 5.5 CVE-2025-46775 A debug messages revealing unnecessary information vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7.4.0 through 7.4.6, Fo… Fortiextender Firmware 7.4.8 / 7.6.3+ Fix from $1,6002025-11-18 MEDIUM 5.3 CVE-2025-46215 An Improper Isolation or Compartmentalization vulnerability [CWE-653] in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.7,… Fortisandbox 4.4.8 / 5.0.2+ Fix from $1,6002025-11-18 CRITICAL 9.8 CVE-2025-64446 KEVEPSS 92% A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9, FortiWe… Fortiweb 7.0.12 / 7.2.12+ Fix from $2,3002025-11-14 HIGH 7.8 CVE-2025-53951 An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiDLP Agent's Outlookproxy pl… Fortidlp Agent after 11.5.1 Fix from $1,9502025-10-16 HIGH 7.8 CVE-2025-54658 An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiDLP Agent's Outlookproxy pl… Fortidlp Agent after 11.5.1 Fix from $1,9502025-10-16 MEDIUM 6.0 CVE-2025-53950 An Exposure of Private Personal Information ('Privacy Violation') vulnerability [CWE-359] in Fortinet FortiDLP Agent's Outlookproxy plugin for MacOS … Fortidlp Agent after 11.5.1 Fix from $1,6002025-10-16 MEDIUM 6.5 CVE-2025-59921 An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiADC version 7.4.0, version 7.2.3 and below, ve… Fortiadc 7.1.5 / 7.2.4+ Fix from $1,6002025-10-14 HIGH 8.8 CVE-2025-57740 An Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.0 all … Fortiproxy 1.4.3 / 7.2.11+ Fix from $1,9502025-10-14 HIGH 7.8 CVE-2025-57741 An Incorrect Permission Assignment for Critical Resource vulnerability [CWE-732] in FortiClientMac 7.4.0 through 7.4.3, 7.2.0 through 7.2.11, 7.0 all… Forticlient 7.2.12 / 7.4.4+ Fix from $1,9502025-10-14 HIGH 7.3 CVE-2025-57716 An Uncontrolled Search Path Element vulnerability [CWE-427] in FortiClient Windows 7.4.0 through 7.4.3, 7.2.0 through 7.2.11, 7.0 all versions may al… Forticlient 7.2.12 / 7.4.4+ Fix from $1,9502025-10-14 MEDIUM 6.7 CVE-2025-58325 An Incorrect Provision of Specified Functionality vulnerability [CWE-684] in FortiOS 7.6.0, 7.4.0 through 7.4.5, 7.2.5 through 7.2.10, 7.0.0 through … Fortios 7.0.16 / 7.2.11+ Fix from $1,6002025-10-14 MEDIUM 6.5 CVE-2025-53845 An improper authentication vulnerability [CWE-287] in Fortinet FortiAnalyzer version 7.6.0 through 7.6.3 and before 7.4.6 allows an unauthenticated a… Fortianalyzer 7.4.7 / 7.6.4+ Fix from $1,6002025-10-14 MEDIUM 5.3 CVE-2025-54973 A concurrent execution using shared resource with improper synchronization ('Race Condition') vulnerability [CWE-362] in Fortinet FortiAnalyzer versi… Fortianalyzer 7.0.14 / 7.2.11+ Fix from $1,6002025-10-14 CRITICAL 9.8 CVE-2025-49201 A weak authentication vulnerability in Fortinet FortiPAM 1.5.0, FortiPAM 1.4.0 through 1.4.2, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, F… Fortipam 1.4.3 / 7.2.5+ Fix from $2,3002025-10-14 HIGH 7.8 CVE-2025-46774 An Improper Verification of Cryptographic Signature vulnerability [CWE-347] in FortiClient MacOS installer version 7.4.2 and below, version 7.2.9 and… Forticlient 7.2.10 / 7.4.4+ Fix from $1,9502025-10-14 MEDIUM 6.1 CVE-2025-47890 An URL Redirection to Untrusted Site vulnerabilities [CWE-601] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, Fo… Fortios 7.4.9 / 7.6.4+ Fix from $1,6002025-10-14 HIGH 7.1 CVE-2025-31365 An Improper Control of Generation of Code ('Code Injection') vulnerability [CWE-94] in FortiClientMac 7.4.0 through 7.4.3, 7.2.1 through 7.2.8 may al… Forticlient 7.2.9 / 7.4.4+ Fix from $1,9502025-10-14