Vulnerabilities
Vulnerabilities affecting firewalls and security appliances, with vendor fix data, CISA KEV status and EPSS.
Intelligence updated 30 Sept 2026 at 15:17 UTC
106 vulnerabilities
- CVE-2023-2918122 Feb 2024
A use of externally-controlled format string in Fortinet FortiOS 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6…
High8.8CVSS 3.1, High0.72% - CVE-2023-4279120 Feb 2024
A relative path traversal in Fortinet FortiManager version 7.4.0 and 7.2.0 through 7.2.3 and 7.0.0 through 7.…
High8.8CVSS 3.1, High3% Fortinet Multiple Products Format String Vulnerability
Critical9.8CVSS 3.1, Critical62%Fortinet FortiOS Out-of-Bound Write Vulnerability
Critical9.8CVSS 3.1, Critical83%- CVE-2023-4425010 Jan 2024
An improper privilege management vulnerability [CWE-269] in a Fortinet FortiOS HA cluster version 7.4.0 throu…
High8.8CVSS 3.1, High0.90% Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability
Critical9.8CVSS 3.1, Critical86%Fortinet FortiOS Path Traversal Vulnerability
High7.1CVSS 3.1, High11%Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability
Critical9.8CVSS 3.1, Critical99%Fortinet Multiple Products Authentication Bypass Vulnerability
Critical9.8CVSS 3.1, Critical100%Fortinet FortiOS Arbitrary File Download
High7.8CVSS 3.1, High0.87%Fortinet FortiOS Default Configuration Vulnerability
Medium6.5CVSS 3.1, Medium18%Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability
Medium6.5CVSS 3.1, Medium6%Fortinet FortiOS and FortiProxy Improper Authorization
High7.5CVSS 3.1, High82%Fortinet FortiOS SSL VPN Path Traversal Vulnerability
Critical9.8CVSS 3.1, Critical100%Fortinet FortiOS and FortiProxy Out-of-bounds Write
Medium6.5CVSS 3.1, Medium34%Fortinet FortiOS and FortiADC Improper Access Control Vulnerability
Medium4.3CVSS 3.1, Medium38%