Vulnerabilities > Fortinet > Fortios

DATE CVE VULNERABILITY TITLE RISK
2018-11-27 CVE-2018-13376 Unspecified vulnerability in Fortinet Fortios
An uninitialized memory buffer leak exists in Fortinet FortiOS 5.6.1 to 5.6.3, 5.4.6 to 5.4.7, 5.2 all versions under web proxy's disclaimer response web pages, potentially causing sensitive data to be displayed in the HTTP response.
network
low complexity
fortinet
7.5
2018-09-05 CVE-2018-9194 Information Exposure Through Discrepancy vulnerability in Fortinet Fortios
A plaintext recovery of encrypted messages or a Man-in-the-middle (MiTM) attack on RSA PKCS #1 v1.5 encryption may be possible without knowledge of the server's private key.
network
high complexity
fortinet CWE-203
5.9
2018-09-05 CVE-2018-9192 Information Exposure Through Discrepancy vulnerability in Fortinet Fortios
A plaintext recovery of encrypted messages or a Man-in-the-middle (MiTM) attack on RSA PKCS #1 v1.5 encryption may be possible without knowledge of the server's private key.
network
high complexity
fortinet CWE-203
5.9
2018-07-05 CVE-2018-9185 Information Exposure vulnerability in Fortinet Fortios
An information disclosure vulnerability in Fortinet FortiOS 6.0.0 and below versions reveals user's web portal login credentials in a Javascript file sent to client-side when pages bookmarked in web portal use the Single Sign-On feature.
network
high complexity
fortinet CWE-200
8.1
2018-05-25 CVE-2017-14185 Information Exposure vulnerability in Fortinet Fortios
An Information Disclosure vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8 and 5.2 all versions allows SSL VPN web portal users to access internal FortiOS configuration information (eg:addresses) via specifically crafted URLs inside the SSL-VPN web portal.
network
low complexity
fortinet CWE-200
5.3
2018-05-24 CVE-2017-14187 Improper Privilege Management vulnerability in Fortinet Fortios
A local privilege escalation and local code execution vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8, and 5.2 and below versions allows attacker to execute unauthorized binary program contained on an USB drive plugged into a FortiGate via linking the aforementioned binary program to a command that is allowed to be run by the fnsysctl CLI command.
low complexity
fortinet CWE-269
6.2
2018-02-08 CVE-2012-0941 Cross-site Scripting vulnerability in Fortinet Fortios
Multiple cross-site scripting (XSS) vulnerabilities in Fortinet FortiGate UTM WAF appliances with FortiOS 4.3.x before 4.3.6 allow remote attackers to inject arbitrary web script or HTML via vectors involving the (1) Endpoint Monitor, (2) Dialup List, or (3) Log&Report Display modules, or the fields_sorted_opt parameter to (4) user/auth/list or (5) endpointcompliance/app_detect/predefined_sig_list.
network
low complexity
fortinet CWE-79
6.1
2018-01-29 CVE-2017-14190 Cross-site Scripting vulnerability in Fortinet Fortios
A Cross-site Scripting vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.7, 5.2 and earlier, allows attacker to inject arbitrary web script or HTML via maliciously crafted "Host" header in user HTTP requests.
network
low complexity
fortinet CWE-79
6.1
2017-12-13 CVE-2017-7738 Information Exposure vulnerability in Fortinet Fortios
An Information Disclosure vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.5, 5.2 and below versions allow an admin user with super_admin privileges to view the current SSL VPN web portal session info which may contains user credentials through the fnsysctl CLI command.
network
low complexity
fortinet CWE-200
7.2
2017-11-29 CVE-2017-14186 Cross-site Scripting vulnerability in Fortinet Fortios
A Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4 and below versions under SSL VPN web portal allows a remote user to inject arbitrary web script or HTML in the context of the victim's browser via the login redir parameter.
network
low complexity
fortinet CWE-79
5.4