- Filter by Date
- 2022
- 11 07-2022
- 2022
- Filter by Severity
-
Filter by Affected Product
- All
- 1 FortiADC
- 1 FortiClientWindows
- 1 FortiNAC
- 1 FortiDeceptor
- 1 FortiEDR
- 0 FortiOS
- 0 FortiProxy
- 0 FortiManager
- 0 FortiAnalyzer
- 0 FortiWeb
- 0 FortiMail
- 0 FortiSandbox
- 0 FortiPortal
- 0 FortiWAN
- 0 FortiAuthenticator
- 0 FortiSIEM
- 0 FortiClientEMS
- 0 FortiWLC
- 0 FortiClientMac
- 0 FortiAP
- 0 FortiSOAR
- 0 FortiTester
- 0 FortiAP-W2
- 0 FortiSwitch
- 0 FortiWLM
- 0 FortiRecorder
- 0 FortiVoiceEnterprise
- 0 FortiAP-S
- 0 AscenLink
- 0 FortiAP-U
- 0 FortiClientLinux
- 0 FortiDB
- 0 FortiDDoS
- 0 FortiCache
- 0 FortiExtender
- 0 Meru AP
- 0 FortiADCManager
- 0 FortiIsolator
- 0 FortiSIEMWindowsAgent
- 0 FortiTokenAndroid
- 0 FortiTokenIOS
- 0 FortiWAN-Manager
- 0 FSSO Windows CA
- 0 FortiAP-C
- 0 FortiClientAndroid
- 0 FortiClientiOS
- 0 FortiDDoS-CM
- 0 FortiSwitchManager
- 0 FortiWebManager
- 0 Meru Controller
- 0 SSL_VPN
- 0 FSSO (all dist.)
- 0 FSSO Windows DC Agent
- 0 FortiAnalyzer-BigData
- 0 FortiCloud
- 0 FortiDDoS-F
- 0 FortiExplorer Windows
- 0 FortiFone
- 0 FortiGuard
- 0 FortiNDR
- 0 FortiOS-6K7K
- 0 FortiPresence
- 0 FortiSDNConnector
- 0 FortiTokenMobileWP
- 0 FortiVoice
All
Refine Search
PSIRT Advisories
Monthly PSIRT Advisories
- 2023: May , Apr , Mar , Feb , Jan
- 2022: Dec , Nov , Sep , Aug , Jul , Jun , May , Apr , Mar , Feb
- 2021: Dec , Nov , Oct , Sep , Aug , Jul , Jun , May , Apr , Mar , Feb , Jan
- 2020: Dec
The following is a list of advisories for issues resolved in Fortinet products. The resolution of such issues is coordinated by the Fortinet Product Security Incident Response Team (PSIRT), a dedicated, global team that manages the receipt, investigation, and public reporting of information about security vulnerabilities and issues related to Fortinet products and services.
For details of how to raise a PSIRT Issue with Fortinet, please see our PSIRT Policy here.
Multiple improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerabilities [CWE-89] in ...
FortiADC
7.0.1, 7.0.0, 6.2.2, 6.2.1, 6.2.0, 6.1.6, 6.1.5, 6.1.4, 6.1.3, 6.1.2, 6.1.1, 6.1.0, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0, 5.4.5, 5.4.4, 5.4.3, 5.4.2, 5.4.1, 5.4.0, 5.3.7, 5.3.6, 5.3.5, 5.3.4, 5.3.3, 5.3.2, 5.3.1, 5.3.0, 5.2.8, 5.2.7, 5.2.6, 5.2.5, 5.2.4, 5.2.3, 5.2.2, 5.2.1, 5.2.0, 5.1.7, 5.1.6, 5.1.5, 5.1.4, 5.1.3, 5.1.2, 5.1.1, 5.1.0, 5.0.4, 5.0.3, 5.0.2, 5.0.1, 5.0.0
Jul 05, 2022
Severity
Medium
IR Number: FG-IR-22-051
CVE-2022-26120
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fo...
Jul 05, 2022
Severity
Medium
IR Number: FG-IR-22-049
CVE-2022-27483
Medium
IR Number: FG-IR-22-049
CVE-2022-27483
A buffer copy without checking size of input ('Classic Buffer Overflow')Â vulnerability [CWE-120] in FortiAnalyzer, Forti...
Jul 05, 2022
Severity
High
IR Number: FG-IR-21-206
CVE-2021-43072
High
IR Number: FG-IR-21-206
CVE-2021-43072
A relative path traversal vulnerability [CWE-23] in FortiClient for Windows may allow a local unprivileged attacker to esc...
FortiClientWindows
7.0.2, 7.0.1, 7.0.0, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.9, 6.2.8, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0
Jul 05, 2022
Severity
High
IR Number: FG-IR-21-190
CVE-2021-41031
Multiple relative path traversal vulnerabilities [CWE-23] in FortiDeceptor management interface may allow a remote and aut...
FortiDeceptor
4.0.1, 4.0.0, 3.3.2, 3.3.1, 3.3.0, 3.2.2, 3.2.1, 3.2.0, 3.1.1, 3.1.0, 3.0.2, 3.0.1, 3.0.0, 2.1.0, 2.0.0, 1.1.0, 1.0.1, 1.0.0
Jul 05, 2022
Severity
High
IR Number: FG-IR-21-213
CVE-2022-30302
An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiEDR Central Manager may allo...
FortiEDR
5.1.0, 5.0.3, 5.0.1, 5.0.0, 4.0.0
Jul 05, 2022
Severity
Medium
IR Number: FG-IR-22-077
CVE-2022-29057
A privilege chaining vulnerability [CWE-268] in FortiManager and FortiAnalyzer may allow a local and authenticated attacke...
Jul 05, 2022
Severity
Medium
IR Number: FG-IR-21-056
CVE-2022-26118
Medium
IR Number: FG-IR-21-056
CVE-2022-26118
An empty password in configuration file vulnerability [CWE-258] in FortiNAC may allow an authenticated attacker to access ...
FortiNAC
9.2.3, 9.2.2, 9.2.1, 9.2.0, 9.1.5, 9.1.4, 9.1.3, 9.1.2, 9.1.1, 9.1.0, 8.8.9, 8.8.8, 8.8.7, 8.8.6, 8.8.5, 8.8.4, 8.8.3, 8.8.2, 8.8.11, 8.8.10, 8.8.1, 8.8.0, 8.7.6, 8.7.5, 8.7.4, 8.7.3, 8.7.2, 8.7.1, 8.7.0, 8.6.5, 8.6.4, 8.6.3, 8.6.2, 8.6.0, 8.5.4, 8.5.2, 8.5.1, 8.5.0, 8.3.7
Jul 05, 2022
Severity
High
IR Number: FG-IR-22-058
CVE-2022-26117
A stack-based buffer overflow vulnerability [CWE-121] in the command line interpreter of FortiOS and FortiProxy may allow ...
Jul 05, 2022
Severity
Medium
IR Number: FG-IR-21-179
CVE-2021-44170
Medium
IR Number: FG-IR-21-179
CVE-2021-44170
An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in FortiOS ...
Jul 05, 2022
Severity
Low
IR Number: FG-IR-21-057
CVE-2022-23438
Low
IR Number: FG-IR-21-057
CVE-2022-23438
An integer overflow / wraparound vulnerability [CWE-190] in the FortiOS, FortiProxy, FortiSwitch, FortiRecoder, and FortiV...
Jul 05, 2022
Severity
Medium
IR Number: FG-IR-21-155
CVE-2021-42755
Medium
IR Number: FG-IR-21-155
CVE-2021-42755