PSIRT Advisories

The following is a list of advisories for issues resolved in Fortinet products. The resolution of such issues is coordinated by the Fortinet Product Security Incident Response Team (PSIRT), a dedicated, global team that manages the receipt, investigation, and public reporting of information about security vulnerabilities and issues related to Fortinet products and services.  

For details of how to raise a PSIRT Issue with Fortinet, please see our PSIRT Policy here.

An admin user with super_admin privileges (i.e. with a super_admin profile) may view the current sslvpn web portal session info,...

Dec 08, 2017 Risk IR Number: FG-IR-17-172
Before Dec 5th, 2017, a Cross-Site-Scripting (XSS) vulnerability in forticloud.com on-demand sandbox GUI may have allowed an authenticated...

Dec 08, 2017 Risk IR Number: FG-IR-17-259
FortiWebManager 5.8.0 fails to check the admin password, granting access regardless the provided string.

Nov 22, 2017 Risk IR Number: FG-IR-17-248
There exists a persistent Cross-site Scripting (XSS) vulnerability on FortiWeb's webUI Certificate View page, which can be triggered...

Nov 17, 2017 Risk IR Number: FG-IR-17-131
An old Infineon RSA library does not properly generate RSA key pairs, therefore enabling an attacker to potentially infer a private...

Nov 03, 2017 Risk IR Number: FG-IR-17-249
A collection of Bluetooth implementation vulnerabilities known as "BlueBorne" has been released. These vulnerabilities collectively...

Nov 03, 2017 Risk IR Number: FG-IR-17-212
A reflected XSS vulnerability exists in FortiOS web proxy disclaimer response web pages, potentially  exploitable by an unauthenticated...

Nov 03, 2017 Risk IR Number: FG-IR-17-168
FortiOS SSL Deep-Inspection may enable insecure renegotiation between TLS clients and servers that support secure renegotiation,...

Nov 03, 2017 Risk IR Number: FG-IR-17-137
A low privileged user may be able to execute arbitrary code by exploiting a FortiClientNamedPipe vulnerability.

Oct 31, 2017 Risk IR Number: FG-IR-16-095
An authenticated user may pass a specially crafted payload to the 'params' parameter of the JSON web API (URLs with /json) , which...

Oct 24, 2017 Risk IR Number: FG-IR-17-206
A reflected XSS vulnerability exists in FortiOS web GUI "Login Disclaimer" redir parameter. It is potentially exploitable by a...

Oct 24, 2017 Risk IR Number: FG-IR-17-113
Multiple Remote Code Execution (RCE) vulnerabilities (CVE-2017-12615, CVE-2017-12617) are affecting Apache Tomcat.

Oct 24, 2017 Risk IR Number: FG-IR-17-251
Several vulnerabilities affect the Wi-Fi Protected Access II (WPA2) protocol, potentially enabling Man-in-the-Middle (MitM) attacks...

Oct 16, 2017 Risk IR Number: FG-IR-17-196
The FortiWLC file management AP script download webUI page is affected by an OS Command Injection vulnerability which may allow...

Oct 13, 2017 Risk IR Number: FG-IR-17-119
The FortiWLC admin webUI is affected by XSS vulnerabilities, potentially exploitable by an authenticated user, via non-sanitized...

Oct 13, 2017 Risk IR Number: FG-IR-17-106