- Filter by Date
- 2023
- 5 01-2023
- 2022
- 2021
- 2020
- 2019
- 2018
- 2017
- 2016
- 2015
- 2014
- 2013
- 2012
- 2023
- Filter by Severity
-
Filter by Affected Product
- All
- 114 FortiOS
- 48 FortiManager
- 47 FortiWeb
- 41 FortiAnalyzer
- 33 FortiProxy
- 30 FortiMail
- 25 FortiADC
- 24 FortiSandbox
- 21 FortiPortal
- 20 FortiClientWindows
- 18 FortiWAN
- 15 FortiAuthenticator
- 14 FortiClientEMS
- 13 FortiSIEM
- 12 FortiSwitch
- 12 FortiWLC
- 11 FortiAP
- 11 FortiClientMac
- 10 FortiAP-W2
- 10 FortiDDoS
- 10 FortiRecorder
- 10 FortiTester
- 10 FortiVoiceEnterprise
- 9 FortiAP-S
- 9 FortiWLM
- 8 FortiNAC
- 8 FortiSOAR
- 6 FortiAP-U
- 6 FortiDB
- 6 FortiDeceptor
- 5 AscenLink
- 5 FortiClientLinux
- 5 FortiEDR
- 5 Meru AP
- 4 FortiADCManager
- 4 FortiCache
- 4 FortiDDoS-F
- 4 FortiIsolator
- 4 FortiNDR
- 3 FortiAP-C
- 3 FortiClientAndroid
- 3 FortiClientiOS
- 3 FortiDDoS-CM
- 3 FortiExtender
- 3 FortiSIEMWindowsAgent
- 3 FortiTokenAndroid
- 3 FortiTokenIOS
- 2 FSSO Windows CA
- 2 FortiAnalyzer-BigData
- 2 FortiWAN-Manager
- 2 FortiWebManager
- 2 Meru Controller
- 2 SSL_VPN
- 1 AV Engine
- 1 FSSO (all dist.)
- 1 FSSO Windows DC Agent
- 1 FortiCloud
- 1 FortiExplorer Windows
- 1 FortiFone
- 1 FortiGuard
- 1 FortiOS-6K7K
- 1 FortiSDNConnector
- 1 FortiSwitchManager
- 1 FortiTokenMobileWP
- 1 FortiVoice
January
(5)
Refine Search
PSIRT Advisories
Monthly PSIRT Advisories
- 2023: Jan
- 2022: Dec , Nov , Sep , Aug , Jul , Jun , May , Apr , Mar , Feb
- 2021: Dec , Nov , Oct , Sep , Aug , Jul , Jun , May , Apr , Mar , Feb , Jan
- 2020: Dec
The following is a list of advisories for issues resolved in Fortinet products. The resolution of such issues is coordinated by the Fortinet Product Security Incident Response Team (PSIRT), a dedicated, global team that manages the receipt, investigation, and public reporting of information about security vulnerabilities and issues related to Fortinet products and services.
For details of how to raise a PSIRT Issue with Fortinet, please see our PSIRT Policy here.
Under certain conditions, FortiClient VPN may be susceptible to a certificate validation vulnerability which would allow a...
May 13, 2013
Severity
Critical
IR Number: FG-IR-13-008
Critical
IR Number: FG-IR-13-008
Input filter bypass and exception handling vulnerabilities can be used by an attacker to hijack administrator or customer ...
Jan 29, 2013
Severity
Medium
IR Number: FG-IR-013-001
CVE-2013-1471
Medium
IR Number: FG-IR-013-001
CVE-2013-1471
FortiDB does not sanitize user input properly under limited circumstances. The vulnerability could allow an attacker to i...
Dec 03, 2012
Severity
Low
IR Number: FG-IR-012-007
CVE-2012-6347
Low
IR Number: FG-IR-012-007
CVE-2012-6347
FortiWeb does not sanitize user input properly under limited circumstances. The vulnerability could allow an attacker to ...
Dec 03, 2012
Severity
Low
IR Number: FG-IR-012-008
CVE-2012-6346
Low
IR Number: FG-IR-012-008
CVE-2012-6346
FortiWeb fails to sanitize user input. The vulnerability allows an attacker to inject script code.
Oct 25, 2012
Severity
Low
IR Number: FG-IR-012-006
Low
IR Number: FG-IR-012-006
FortiMail fails to sanitize user input. The vulnerability allows an attacker to bypass its input filtering routine, which ...
Oct 25, 2012
Severity
Medium
IR Number: FG-IR-012-005
Medium
IR Number: FG-IR-012-005
Vulnerability-lab.com publicly released news of discovered vulnerabilities discovered in FortiGate UTM WAF Appliances platforms.
Sep 14, 2012
Severity
Low
IR Number: FG-IR-012-004
Low
IR Number: FG-IR-012-004
Fortinet has verified a potential issue during HTTP session authentication that could lead to a buffer overflow condition ...
Aug 20, 2012
Severity
Medium
IR Number: FG-IR-012-003
Medium
IR Number: FG-IR-012-003
On May 2, 2012 a policy bypass vulnerability was publicly disclosed against Fortinet's FortiWeb Web Application Firewall. ...
May 04, 2012
Severity
Low
IR Number: FG-IR-012-002
Low
IR Number: FG-IR-012-002
On January 27, 2012, vulnerability-lab.com publicly released news of discovered vulnerabilities discovered in FortiGate UT...
Feb 01, 2012
Severity
Low
IR Number: FG-IR-012-001
CVE-2012-0941
Low
IR Number: FG-IR-012-001
CVE-2012-0941