Fortinet, Inc. FortiOS
8 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2018-9194 | 6.0.1, 6.0.0 ; 5.4.9, 5.4.8, 5.4.7, 5.4.6 | A plaintext recovery of encrypted messages or a Man-in-the-middle (MiTM) attack on RSA PKCS #1 v1.5 encryption may be possible without knowl | MEDIUM 5.9 | 1.1 % | ||
| CVE-2018-9192 | 6.0.1, 6.0.0 ; 5.4.9, 5.4.8, 5.4.7, 5.4.6 | A plaintext recovery of encrypted messages or a Man-in-the-middle (MiTM) attack on RSA PKCS #1 v1.5 encryption may be possible without knowl | MEDIUM 5.9 | 1.1 % | ||
| CVE-2017-14185 | 5.6.0 to 5.6.2 ; 5.4.0 to 5.4.8 ; 5.2 all versions | An Information Disclosure vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8 and 5.2 all versions allows SSL VPN web portal us | MEDIUM 5.3 | 1.3 % | ||
| CVE-2017-14187 | 5.6.0 to 5.6.2 ; 5.4.0 to 5.4.8 ; 5.2 and below versions | A local privilege escalation and local code execution vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8, and 5.2 and below ve | MEDIUM 6.2 | 0.4 % | ||
| CVE-2017-14190 | 5.6.0 to 5.6.2 ; 5.4.0 to 5.4.7 ; 5.2 and all earlier versions. | A Cross-site Scripting vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.7, 5.2 and earlier, allows attacker to inject arbitrar | MEDIUM 6.1 | 1.1 % | ||
| CVE-2017-7738 | 5.6.0 to 5.6.2 ; 5.4.0 to 5.4.5 ; 5.2 and below | An Information Disclosure vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.5, 5.2 and below versions allow an admin user with | HIGH 7.2 | 1.5 % | ||
| CVE-2017-14186 | 5.6.0 to 5.6.2 ; 5.4.0 to 5.4.6 ; 5.2.0 to 5.2.12 ; … | A Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4 and below versions under SSL VPN web port | MEDIUM 5.4 | 3.7 % | ||
| CVE-2017-7739 | 5.6.0 ; 5.4.5, 5.4.4, 5.4.3, 5.4.2, 5.4.1, 5.4.0 ; 5.2.11, 5.2.10, 5.2.9, 5.2.8, 5.2.7, 5.2.6, 5.2.5, 5.2.4, 5.2.3, 5.2.2, 5.2.1, 5.2.0 | A reflected Cross-site Scripting (XSS) vulnerability in web proxy disclaimer response web pages in Fortinet FortiOS 5.6.0, 5.4.0 to 5.4.5, 5 | MEDIUM 6.1 | 1.1 % |