PSIRT Advisories

Monthly PSIRT Advisories

The following is a list of advisories for issues resolved in Fortinet products. The resolution of such issues is coordinated by the Fortinet Product Security Incident Response Team (PSIRT), a dedicated, global team that manages the receipt, investigation, and public reporting of information about security vulnerabilities and issues related to Fortinet products and services.  

For details of how to raise a PSIRT Issue with Fortinet, please see our PSIRT Policy here.

FortiAP Bleeding Bit Vulnerability
Some FortiAP models are vulnerable to the Bleeding Bit Vulnerability (CVE-2018-16986) present in the Texas Instruments WiF...
FortiAP-S 6.0.3, 6.0.2, 6.0.1, 6.0.0, 5.6.3, 5.6.2, 5.6.1, 5.6.0 FortiAP-W2 6.0.3, 6.0.2, 6.0.1, 6.0.0, 5.6.3, 5.6.2, 5.6.1, 5.6.0
Apr 10, 2019 Severity black-background-circle-icon black-background-circle-icon black-background-circle-icon lightgray-background-circle-icon lightgray-background-circle-icon Medium IR Number: FG-IR-18-356 CVE-2018-16986
FortiSwitch multiple XSS vulnerabilities in the jQuery library
FortiSwitch is vulnerable to multiple Cross-site Scripting (XSS) attacks present in the jQuery javascript libraryCVE-2015-...
FortiMail 6.0.0, 5.4.5 FortiSIEM 5.2.8 FortiClientWindows 6.0.0 FortiSwitch 6.0.2, 6.0.1, 3.6.8 FortiAP 5.6.3 FortiWeb 6.0.1 FortiOS 6.0.1 FortiPortal 4.2.2 FortiManager 5.6.3 FortiAP-S 5.6.2 FortiAP-W2 5.6.2
Apr 10, 2019 Severity black-background-circle-icon black-background-circle-icon black-background-circle-icon lightgray-background-circle-icon lightgray-background-circle-icon Medium IR Number: FG-IR-18-013 CVE-2015-9251