Priority CRITICAL 100KEV
A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1 all versions, FortiMail 7.6.0 through 7.6.2, FortiMail 7.4.0…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.30944 · Published 2025-05-13 · No fix listed CWE-121
Priority MEDIUM 61
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3, FortiManager Cloud 7.4.1 through 7.4.3, Forti…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.15212 · Published 2025-01-14 · No fix listed CWE-22
Priority MEDIUM 41
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiRecorder 7.2.0 through 7.2.1, FortiRecorder 7.0.0 through 7.0.4, FortiVoice 7.0.0 through 7.0.4, FortiVoice…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00825 · Published 2025-01-16 · No fix listed CWE-22
Priority LOW 39
A cross-site request forgery (CSRF) in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x, FortiSwitch version 7.0.0 through 7.0.4, 6.4.0 through 6.4.10, 6.2.0 through 6.2.7, 6.0.x, FortiMail version 7.0.0 through 7.0.3,…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00491 · Published 2023-12-13 · No fix listed CWE-352
Priority LOW 32
An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiMail versions 7.2.0 through 7.2.4 and 7.0.0 through 7.0.6 and 6.4.0 through 6.4.7, FortiRecorder versions 7.0…
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00585 · Published 2025-01-14 · No fix listed CWE-78
Priority LOW 29
An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiDDoS version 5.4.0, version 5.3.2 and below, version 5.2.0, version 5.1.0, version 5.0.0, version 4.7.0, versi…
CVSS 3.1MEDIUM 5.0· Network · No auth · No interaction · EPSS 0.00503 · Published 2025-03-28 · No fix listed CWE-200
Priority LOW 28
A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests, where the `Host` header points to an arbitrary webserver
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00465 · Published 2025-01-22 · No fix listed CWE-610
Priority LOW 26
A improper limitation of a pathname to a restricted directory ('path traversal') [CWE-23] in Fortinet FortiRecorder version 7.2.0 through 7.2.1 and before 7.0.4 allows a privileged attacker to delete files from the under…
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00198 · Published 2025-01-14 · No fix listed CWE-22
Priority LOW 24
A relative path traversal in Fortinet FortiRecorder [CWE-23] version 7.2.0 through 7.2.1 and before 7.0.4 allows a privileged attacker to read files from the underlying filesystem via crafted HTTP or HTTPs requests.
CVSS 3.1MEDIUM 5.2· Network · High privileges · No interaction · EPSS 0.00538 · Published 2025-01-14 · No fix listed CWE-23
Priority LOW 20
A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, FortiMail 7.0 all versions, FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1…
CVSS 3.1MEDIUM 4.2· Network · Low privileges · No interaction · EPSS 0.00484 · Published 2025-10-14 · No fix listed CWE-201
Priority LOW 19
Multiple relative path traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiCamera 2.1 all versions, FortiCamera 2.0.0, FortiCamera 1.1 all versions, FortiCamera 1.0 all versions, FortiMail 7.6.0 through 7.6…
CVSS 3.1MEDIUM 4.2· Local · High privileges · No interaction · EPSS 0.00184 · Published 2025-08-12 · No fix listed CWE-23
Priority LOW 17
A cleartext storage of sensitive information vulnerability [CWE-312] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.2, FortiMail 7.4.0 through 7.4.4, FortiMail 7.2.0 through 7.2.7, FortiMail 7.0.0 through 7.0.8, F…
CVSS 3.1MEDIUM 4.0· Local · High privileges · User interaction · EPSS 0.00097 · Published 2026-03-10 · No fix listed CWE-312