- Filter by Date
- 2022
- 2021
- 2020
- 2019
- 2018
- 2017
- 2016
- 2015
- 2014
- 2013
- 2012
- Filter by Severity
-
Filter by Affected Product
- All
- 69 FortiOS
- 38 FortiWeb
- 33 FortiManager
- 27 FortiAnalyzer
- 20 FortiProxy
- 19 FortiMail
- 18 FortiPortal
- 17 FortiSandbox
- 13 FortiClientWindows
- 11 FortiAuthenticator
May
(9)
Refine Search
PSIRT Advisories
Monthly PSIRT Advisories
- 2022: May , Apr , Mar , Feb
- 2021: Dec , Nov , Oct , Sep , Aug , Jul , Jun , May , Apr , Mar , Feb , Jan
- 2020: Dec
The following is a list of advisories for issues resolved in Fortinet products. The resolution of such issues is coordinated by the Fortinet Product Security Incident Response Team (PSIRT), a dedicated, global team that manages the receipt, investigation, and public reporting of information about security vulnerabilities and issues related to Fortinet products and services.
For details of how to raise a PSIRT Issue with Fortinet, please see our PSIRT Policy here.
Authenticated administrative users can store injected Javascript content into a specific field on the web management inter...
Jan 17, 2014
Severity
Medium
IR Number: FG-IR-14-001
CVE-2014-1458
Medium
IR Number: FG-IR-14-001
CVE-2014-1458
Authenticated admin users may be able to obtain access to a system shell from the command line interface.
Dec 13, 2013
Severity
Medium
IR Number: FG-IR-13-016
CVE-2013-6990
Medium
IR Number: FG-IR-13-016
CVE-2013-6990
Multiple CSRF vulnerabilities exist in the FortiAnalyzer web administration console due to an error in CSRF token validati...
Nov 22, 2013
Severity
High
IR Number: FG-IR-13-018
CVE-2013-6826
High
IR Number: FG-IR-13-018
CVE-2013-6826
Multiple CSRF (Cross-Site Request Forgery) vulnerabilities exist in FortiGate because GUI pages are not protected by CSRF ...
Jul 08, 2013
Severity
High
IR Number: FG-IR-13-014
CVE-2013-1414
High
IR Number: FG-IR-13-014
CVE-2013-1414
Improper Guest User Permission Management issue exists in FortiGate.
Jun 13, 2013
Severity
Low
IR Number: FG-IR-013-004
CVE-2013-4604
Low
IR Number: FG-IR-013-004
CVE-2013-4604
Under certain conditions, FortiClient VPN may be susceptible to a certificate validation vulnerability which would allow a...
May 13, 2013
Severity
Critical
IR Number: FG-IR-13-008
Critical
IR Number: FG-IR-13-008
Input filter bypass and exception handling vulnerabilities can be used by an attacker to hijack administrator or customer ...
Jan 29, 2013
Severity
Medium
IR Number: FG-IR-013-001
CVE-2013-1471
Medium
IR Number: FG-IR-013-001
CVE-2013-1471
FortiDB does not sanitize user input properly under limited circumstances. The vulnerability could allow an attacker to i...
Dec 03, 2012
Severity
Low
IR Number: FG-IR-012-007
CVE-2012-6347
Low
IR Number: FG-IR-012-007
CVE-2012-6347
FortiWeb does not sanitize user input properly under limited circumstances. The vulnerability could allow an attacker to ...
Dec 03, 2012
Severity
Low
IR Number: FG-IR-012-008
CVE-2012-6346
Low
IR Number: FG-IR-012-008
CVE-2012-6346
FortiWeb fails to sanitize user input. The vulnerability allows an attacker to inject script code.
Oct 25, 2012
Severity
Low
IR Number: FG-IR-012-006
Low
IR Number: FG-IR-012-006
FortiMail fails to sanitize user input. The vulnerability allows an attacker to bypass its input filtering routine, which ...
Oct 25, 2012
Severity
Medium
IR Number: FG-IR-012-005
Medium
IR Number: FG-IR-012-005
Vulnerability-lab.com publicly released news of discovered vulnerabilities discovered in FortiGate UTM WAF Appliances platforms.
Sep 14, 2012
Severity
Low
IR Number: FG-IR-012-004
Low
IR Number: FG-IR-012-004
Fortinet has verified a potential issue during HTTP session authentication that could lead to a buffer overflow condition ...
Aug 20, 2012
Severity
Medium
IR Number: FG-IR-012-003
Medium
IR Number: FG-IR-012-003
On May 2, 2012 a policy bypass vulnerability was publicly disclosed against Fortinet's FortiWeb Web Application Firewall. ...
May 04, 2012
Severity
Low
IR Number: FG-IR-012-002
Low
IR Number: FG-IR-012-002
On January 27, 2012, vulnerability-lab.com publicly released news of discovered vulnerabilities discovered in FortiGate UT...
Feb 01, 2012
Severity
Low
IR Number: FG-IR-012-001
CVE-2012-0941
Low
IR Number: FG-IR-012-001
CVE-2012-0941