Fortinet FortiDDoS-F
9 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-39815 | 7.2.1 – 7.2.2 | A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiDDoS-F 7.2.1 through 7 | HIGH 8.8 | 0.4 % | ||
| CVE-2024-45325 | 7.0.0 – 7.0.2 ; 6.6.0 – 6.6.3 ; 6.5.0 – 6.5.1 ; … | An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiDDoS | MEDIUM 6.7 | 0.5 % | ||
| CVE-2022-23439 | | A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafte | MEDIUM 6.1 | 0.5 % | ||
| CVE-2022-27486 | 6.5.0 ; 6.4.0 – 6.4.1 ; 6.3.0 – 6.3.4 ; … | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiDDoS version 5.5.0 through 5.5 | HIGH 7.8 | 0.8 % | ||
| CVE-2023-25603 | 6.4.0 – 6.4.1 ; 6.3.0 – 6.3.4 | A permissive cross-domain policy with untrusted domains vulnerability in Fortinet FortiADC 7.1.0 - 7.1.1, FortiDDoS-F 6.3.0 - 6.3.4 and 6.4. | CRITICAL 9.1 | 0.4 % | ||
| CVE-2023-29177 | 6.5.0 ; 6.4.0 – 6.4.1 ; 6.3.0 – 6.3.4 ; … | Multiple buffer copy without checking size of input ('classic buffer overflow') vulnerabilities [CWE-120] in FortiADC version 7.2.0 and befo | MEDIUM 6.7 | 0.2 % | ||
| CVE-2022-40679 | 6.4.0 ; 6.3.0 – 6.3.3 ; 6.2.0 – 6.2.2 ; … | An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in FortiADC 5.x all versions, 6.0 all versions, | HIGH 7.8 | 0.2 % | ||
| CVE-2021-36193 | 6.3.0 ; 6.2.0 – 6.2.2 ; 6.1.0 – 6.1.4 | Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an authenticated attacker to achiev | HIGH 7.2 | 0.8 % | ||
| CVE-2021-42757 | 6.4.0 – 6.4.1 ; 6.3.0 ; 6.2.0 – 6.2.2 ; … | A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authenticated l | MEDIUM 6.7 | 0.5 % |