- Filter by Date
- 2023
- 2022
- 2021
- 2020
- 2019
- 2018
- 2017
- 2016
- 2015
- 2014
- 2013
- 2012
- Filter by Severity
-
Filter by Affected Product
- All
- 125 FortiOS
- 48 FortiProxy
- 47 FortiManager
- 45 FortiAnalyzer
- 29 FortiMail
- 28 FortiSandbox
- 28 FortiWeb
- 27 FortiADC
- 23 FortiClientWindows
- 22 FortiPortal
- 19 FortiAuthenticator
- 19 FortiWAN
- 15 FortiNAC
- 13 FortiSIEM
- 12 FortiClientEMS
- 12 FortiWLC
- 11 FortiAP
- 11 FortiClientMac
- 10 FortiAP-W2
- 10 FortiSOAR
- 10 FortiSwitch
- 10 FortiTester
- 9 FortiRecorder
- 9 FortiVoiceEnterprise
- 9 FortiWLM
- 8 FortiAP-S
- 7 FortiAP-U
- 7 FortiDeceptor
- 6 AscenLink
- 6 FortiClientLinux
- 6 FortiDB
- 6 FortiDDoS
- 5 FortiEDR
- 5 Meru AP
- 4 FortiCache
- 4 FortiExtender
- 3 FortiADCManager
- 3 FortiAP-C
- 3 FortiIsolator
- 3 FortiSIEMWindowsAgent
- 3 FortiSwitchManager
- 3 FortiTokenAndroid
- 3 FortiTokenIOS
- 3 FortiWAN-Manager
- 2 FSSO Windows CA
- 2 FortiClientAndroid
- 2 FortiClientiOS
- 2 FortiDDoS-CM
- 2 FortiOS-6K7K
- 2 FortiWebManager
- 2 Meru Controller
- 2 SSL_VPN
- 1 AV Engine
- 1 FSSO (all dist.)
- 1 FSSO Windows DC Agent
- 1 FortiAnalyzer-BigData
- 1 FortiCloud
- 1 FortiDDoS-F
- 1 FortiExplorer Windows
- 1 FortiFone
- 1 FortiGuard
- 1 FortiNDR
- 1 FortiPresence
- 1 FortiSDNConnector
- 1 FortiTokenMobileWP
- 1 FortiVoice
May
(9)
Refine Search
PSIRT Advisories
Monthly PSIRT Advisories
- 2023: May , Apr , Mar , Feb , Jan
- 2022: Dec , Nov , Sep , Aug , Jul , Jun , May , Apr , Mar , Feb
- 2021: Dec , Nov , Oct , Sep , Aug , Jul , Jun , May , Apr , Mar , Feb , Jan
- 2020: Dec
The following is a list of advisories for issues resolved in Fortinet products. The resolution of such issues is coordinated by the Fortinet Product Security Incident Response Team (PSIRT), a dedicated, global team that manages the receipt, investigation, and public reporting of information about security vulnerabilities and issues related to Fortinet products and services.
For details of how to raise a PSIRT Issue with Fortinet, please see our PSIRT Policy here.
An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in FortiADC may allow an authe...
A relative path traversal vulnerability [CWE-23] in FortiADC may allow a privileged attacker to delete arbitrary directori...
FortiADC
7.2.0, 7.1.1, 7.1.0, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.1.6, 6.1.5, 6.1.4, 6.1.3, 6.1.2, 6.1.1, 6.1.0, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0, 5.4.5, 5.4.4, 5.4.3, 5.4.2, 5.4.1, 5.4.0, 5.3.7, 5.3.6, 5.3.5, 5.3.4, 5.3.3, 5.3.2, 5.3.1, 5.3.0, 5.2.8, 5.2.7, 5.2.6, 5.2.5, 5.2.4, 5.2.3, 5.2.2, 5.2.1, 5.2.0
May 03, 2023
Severity
Medium
IR Number: FG-IR-23-069
CVE-2023-27993
A use of a weak cryptographic algorithm vulnerability [CWE-327] in FortiNAC may increase the chances of an attacker to hav...
May 03, 2023
Severity
Low
IR Number: FG-IR-22-452
CVE-2022-45858
Low
IR Number: FG-IR-22-452
CVE-2022-45858
An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiNAC...
May 03, 2023
Severity
Medium
IR Number: FG-IR-23-013
CVE-2023-22637
Medium
IR Number: FG-IR-23-013
CVE-2023-22637
A weak authentication vulnerability [CWE-1390] in FortiNAC device registration page may allow an unauthenticated attacker ...
May 03, 2023
Severity
Medium
IR Number: FG-IR-22-464
CVE-2022-45860
Medium
IR Number: FG-IR-22-464
CVE-2022-45860
An insufficiently protected credentials vulnerability [CWE-522] in FortiNAC may allow a local attacker with system access ...
FortiNAC
9.4.1, 9.4.0, 9.2.6, 9.2.5, 9.2.4, 9.2.3, 9.2.2, 9.2.1, 9.2.0, 9.1.8, 9.1.7, 9.1.6, 9.1.5, 9.1.4, 9.1.3, 9.1.2, 9.1.1, 9.1.0, 8.8.9, 8.8.8, 8.8.7, 8.8.6, 8.8.5, 8.8.4, 8.8.3, 8.8.2, 8.8.11, 8.8.10, 8.8.1, 8.8.0, 8.7.6, 8.7.5, 8.7.4, 8.7.3, 8.7.2, 8.7.1, 8.7.0
May 03, 2023
Severity
Low
IR Number: FG-IR-22-456
CVE-2022-45859
A use of hard-coded credentials vulnerability [CWE-798] in FortiNAC may allow an authenticated attacker to access to the d...
May 03, 2023
Severity
Medium
IR Number: FG-IR-22-520
CVE-2023-26203
Medium
IR Number: FG-IR-22-520
CVE-2023-26203
A URL redirection to untrusted site ('Open Redirect') vulnerability [CWE-601] in FortiNAC may allow an unauthenticated att...
May 03, 2023
Severity
Low
IR Number: FG-IR-22-407
CVE-2022-43950
Low
IR Number: FG-IR-22-407
CVE-2022-43950
An out-of-bounds write vulnerability [CWE-787] in sslvpnd of FortiOS and FortiProxy may allow an authenticated attacker to...
FortiOS
7.2.3, 7.2.2, 7.2.1, 7.2.0, 7.0.9, 7.0.8, 7.0.7, 7.0.6, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.10, 7.0.1, 7.0.0, 6.4.9, 6.4.8, 6.4.7, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.11, 6.4.10, 6.4.1, 6.4.0, 6.2.9, 6.2.8, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.13, 6.2.12, 6.2.11, 6.2.10, 6.2.1, 6.2.0, 6.0.9, 6.0.8, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.16, 6.0.15, 6.0.14, 6.0.13, 6.0.12, 6.0.11, 6.0.10, 6.0.1, 6.0.0
FortiProxy
7.2.1, 7.2.0, 7.0.7, 7.0.6, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0, 2.0.9, 2.0.8, 2.0.7, 2.0.6, 2.0.5, 2.0.4, 2.0.3, 2.0.2, 2.0.12, 2.0.11, 2.0.10, 2.0.1, 2.0.0, 1.2.9, 1.2.8, 1.2.7, 1.2.6, 1.2.5, 1.2.4, 1.2.3, 1.2.2, 1.2.13, 1.2.12, 1.2.11, 1.2.10, 1.2.1, 1.2.0, 1.1.6, 1.1.5, 1.1.4, 1.1.3, 1.1.2, 1.1.1, 1.1.0, 1.0.7, 1.0.6, 1.0.5, 1.0.4, 1.0.3, 1.0.2, 1.0.1, 1.0.0
May 03, 2023
Severity
High
IR Number: FG-IR-22-475
CVE-2023-22640
A security advisory was released affecting a version of the Linux Kernel used in FortiAuthenticator, FortiProxy & FortiSIE...
FortiSIEM
6.4.1, 6.4.0, 6.3.3, 6.3.2, 6.3.1, 6.3.0, 6.2.1, 6.2.0, 6.1.2, 6.1.1, 6.1.0
FortiProxy
7.0.3, 7.0.2, 7.0.1, 7.0.0
FortiAuthenticator
6.4.1, 6.4.0, 6.3.3, 6.3.2, 6.3.1, 6.3.0
Apr 11, 2023
Severity
High
IR Number: FG-IR-22-050
CVE-2022-0847
An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in FortiADC, FortiDDoS and For...
Apr 11, 2023
Severity
High
IR Number: FG-IR-22-335
CVE-2022-40679
High
IR Number: FG-IR-22-335
CVE-2022-40679
An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiADC...
FortiADC
7.1.1, 7.1.0, 7.0.3, 7.0.2, 7.0.1, 7.0.0, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0
Apr 11, 2023
Severity
Low
IR Number: FG-IR-22-439
CVE-2022-43952
An improper certificate validation vulnerability [CWE-295] in FortiAnalyzer and FortiManager may allow a remote and unauth...
FortiAnalyzer
7.2.1, 7.2.0, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0, 6.4.9, 6.4.8, 6.4.10
FortiManager
7.2.1, 7.2.0, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0, 6.4.9, 6.4.8, 6.4.10
Apr 11, 2023
Severity
Medium
IR Number: FG-IR-22-502
CVE-2023-22642
An improper input validation vulnerability [CWE-20] in FortiAnalyzer may allow an authenticated attacker to disclose file ...
FortiAnalyzer
7.2.1, 7.2.0, 7.0.6, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0, 6.4.9, 6.4.8, 6.4.7, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.10, 6.4.1, 6.4.0
Apr 11, 2023
Severity
Medium
IR Number: FG-IR-22-432
CVE-2022-42477
An improper neutralization of script-related HTML tags in a web page vulnerability [CWE-80] in FortiAuthenticator may allo...
FortiAuthenticator
6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.3.3, 6.3.2, 6.3.1, 6.3.0, 6.2.2, 6.2.1, 6.2.0, 6.1.3, 6.1.2, 6.1.1, 6.1.0
Apr 11, 2023
Severity
Medium
IR Number: FG-IR-22-275
CVE-2022-35850