- Filter by Date
- 2022
- 2021
- 2020
- 2019
- 2018
- 2017
- 2016
- 2015
- 2014
- 2013
- 2012
- Filter by Severity
-
Filter by Affected Product
- All
- 69 FortiOS
- 38 FortiWeb
- 33 FortiManager
- 27 FortiAnalyzer
- 20 FortiProxy
- 19 FortiMail
- 18 FortiPortal
- 17 FortiSandbox
- 13 FortiClientWindows
- 11 FortiAuthenticator
May
(9)
Refine Search
PSIRT Advisories
Monthly PSIRT Advisories
- 2022: May , Apr , Mar , Feb
- 2021: Dec , Nov , Oct , Sep , Aug , Jul , Jun , May , Apr , Mar , Feb , Jan
- 2020: Dec
The following is a list of advisories for issues resolved in Fortinet products. The resolution of such issues is coordinated by the Fortinet Product Security Incident Response Team (PSIRT), a dedicated, global team that manages the receipt, investigation, and public reporting of information about security vulnerabilities and issues related to Fortinet products and services.
For details of how to raise a PSIRT Issue with Fortinet, please see our PSIRT Policy here.
Dec 18, 2014
Severity
Medium
IR Number: FG-IR-14-034
CVE-2014-8730
Medium
IR Number: FG-IR-14-034
CVE-2014-8730
Prior to version 5.0.7, the Web User Interface of FortiManager and FortiAnalyzer is vulnerable to multiple reflected Cross...
Oct 30, 2014
Severity
High
IR Number: FG-IR-14-033
CVE-2014-2334
High
IR Number: FG-IR-14-033
CVE-2014-2334
Oct 21, 2014
Severity
Critical
IR Number: FG-IR-14-032
Critical
IR Number: FG-IR-14-032
An exploit has been discovered in GNU Bourne Again Shell (Bash) versions 1.14.0 through 4.3. This vulnerability may allow...
FortiAnalyzer
5.2.9, 5.2.8, 5.2.7, 5.2.6, 5.2.5, 5.2.4, 5.2.3, 5.2.2, 5.2.10, 5.2.1, 5.2.0, 5.0.7, 5.0.6, 5.0.5, 5.0.4, 5.0.3, 5.0.2, 5.0.1, 5.0.0
FortiAuthenticator
3.1.1, 3.1.0, 3.0.3, 3.0.0, 2.2.0, 2.1.0, 1.3.1, 1.3.0, 1.2.1, 1.2.0, 1.1.0, 1.0.0
FortiDB
5.1.1, 5.1.0, 5.0.0, 4.4.3, 4.4.2, 4.4.1, 4.4.0, 4.3.2, 4.0.1, 4.0.0, 3.2.7, 3.2.6, 3.2.5, 3.2.4, 3.2.3, 3.2.1, 0.4.10
FortiManager
5.2.9, 5.2.8, 5.2.7, 5.2.6, 5.2.5, 5.2.4, 5.2.3, 5.2.2, 5.2.10, 5.2.1, 5.2.0, 5.0.7, 5.0.6, 5.0.5, 5.0.4, 5.0.3, 5.0.2, 5.0.1, 5.0.0, 4.3.8, 4.3.7, 4.3.6, 4.3.5, 4.3.4, 4.3.3, 4.3.2, 4.3.1, 4.3.0, 4.2.9, 4.2.8, 4.2.7, 4.2.6, 4.2.5, 4.2.4, 4.2.2, 4.2.1, 4.2.0, 4.1.4, 4.1.3, 4.1.2, 4.1.1, 4.0.3, 4.0.2, 4.0.1, 4.0.0
FortiWLC
8.6.0, 8.5.3, 8.5.2, 8.5.1, 8.5.0, 8.4.8, 8.4.7, 8.4.6, 8.4.5, 8.4.4, 8.4.2, 8.4.1, 8.4.0, 8.3.3, 8.3.2, 8.3.1, 8.3.0, 8.2.7, 8.2.6, 8.2.5, 8.2.4, 8.1.3, 8.1.2, 8.0.6, 8.0.5
Sep 25, 2014
Severity
Critical
IR Number: FG-IR-14-030
CVE-2014-6271
A temporary denial of service condition can be created using a specially crafted request sent to the FortiManager protocol...
Aug 19, 2014
Severity
Medium
IR Number: FG-IR-14-006
CVE-2014-0351
Medium
IR Number: FG-IR-14-006
CVE-2014-0351
FortiWeb 5.0, 5.1 and 5.2.0 are vulnerable to multiple reflective cross-site scripting issues. Several parameters in the w...
Jul 10, 2014
Severity
Medium
IR Number: FG-IR-14-012
CVE-2014-4738
Medium
IR Number: FG-IR-14-012
CVE-2014-4738
The OpenSSL project released an advisory on June 5th, 2014, which describes the following vulnerabilities:
SSL/TLS MITM v...
Jun 06, 2014
Severity
Medium
IR Number: FG-IR-14-018
CVE-2014-0224
Medium
IR Number: FG-IR-14-018
CVE-2014-0224
Multiple CSRF vulnerabilities exist in the FortiWeb web administration console due to lack of CSRF token protection. This ...
May 02, 2014
Severity
Medium
IR Number: FG-IR-14-013
CVE-2014-3115
Medium
IR Number: FG-IR-14-013
CVE-2014-3115
An information disclosure vulnerability has been discovered in OpenSSL versions 1.0.1 through 1.0.1f. This vulnerability m...
Apr 08, 2014
Severity
Critical
IR Number: FG-IR-14-011
CVE-2014-0160
Critical
IR Number: FG-IR-14-011
CVE-2014-0160
The web administration interface on FortiADC D-series versions 3.2.0 and lower have a reflective cross-site scripting vuln...
Apr 03, 2014
Severity
Medium
IR Number: FG-IR-14-004
CVE-2014-0331
Medium
IR Number: FG-IR-14-004
CVE-2014-0331
A platform-specific remote access vulnerability has been discovered that may allow a remote user to gain privileged access...
Apr 02, 2014
Severity
Critical
IR Number: FG-IR-14-010
CVE-2014-2721 password issue
Critical
IR Number: FG-IR-14-010
CVE-2014-2721 password issue
FortiWeb 5.0.2 and lower are vulnerable to cross-site scripting (CVE-2014-1955), HTTP header injection (CVE-2014-1956) and...
Feb 13, 2014
Severity
Medium
IR Number: FG-IR-13-009
CVE-2014-1955
Medium
IR Number: FG-IR-13-009
CVE-2014-1955
FortiOS 5.0.5 and earlier versions contain a cross-site scripting vulnerability. The mkey parameter in the URL /firewall/...
Feb 03, 2014
Severity
Medium
IR Number: FG-IR-14-003
CVE-2013-7182
Medium
IR Number: FG-IR-14-003
CVE-2013-7182
Fortiweb 5.0.3 and earlier versions contain a cross-site scripting vulnerability. The filter parameter in the URL "/user/...
Feb 03, 2014
Severity
Medium
IR Number: FG-IR-14-002
CVE-2013-7181
Medium
IR Number: FG-IR-14-002
CVE-2013-7181