- Filter by Date
- 2023
- 2022
- 2021
- 2020
- 2019
- 2018
- 2017
- 2016
- 2015
- 2014
- 2013
- 2012
- Filter by Severity
-
Filter by Affected Product
- All
- 53 FortiOS
- 30 FortiWeb
- 20 FortiProxy
- 18 FortiManager
- 14 FortiClientWindows
- 13 FortiAnalyzer
- 13 FortiADC
- 11 FortiMail
- 11 FortiSandbox
- 11 FortiNAC
- 10 FortiWAN
- 9 FortiPortal
- 9 FortiAuthenticator
- 6 FortiSIEM
- 6 FortiAP
- 6 FortiWLM
- 6 FortiDeceptor
- 5 FortiVoiceEnterprise
- 5 FortiAP-U
- 4 FortiClientEMS
- 4 FortiWLC
- 4 FortiAP-W2
- 4 FortiClientMac
- 4 FortiSOAR
- 4 FortiTester
- 4 AscenLink
- 3 FortiRecorder
- 3 FortiAP-S
- 3 FortiClientLinux
- 3 FortiDB
- 3 FortiDDoS
- 3 Meru AP
- 3 FortiSwitchManager
- 3 FortiWAN-Manager
- 2 FortiExtender
- 2 FortiAP-C
- 2 FortiNDR
- 2 FortiOS-6K7K
- 1 FortiSwitch
- 1 FortiEDR
- 1 FortiCache
- 1 FortiIsolator
- 1 FortiSIEMWindowsAgent
- 1 FortiTokenAndroid
- 1 FortiWebManager
- 1 Meru Controller
- 1 FortiAnalyzer-BigData
- 1 FortiFone
- 1 FortiPresence
- 0 FortiADCManager
- 0 FortiTokenIOS
- 0 FSSO Windows CA
- 0 FortiClientAndroid
- 0 FortiClientiOS
- 0 FortiDDoS-CM
- 0 SSL_VPN
- 0 AV Engine
- 0 FSSO (all dist.)
- 0 FSSO Windows DC Agent
- 0 FortiCloud
- 0 FortiDDoS-F
- 0 FortiExplorer Windows
- 0 FortiGuard
- 0 FortiSDNConnector
- 0 FortiTokenMobileWP
- 0 FortiVoice
May
(5)
Refine Search
PSIRT Advisories
Monthly PSIRT Advisories
- 2023: May , Apr , Mar , Feb , Jan
- 2022: Dec , Nov , Sep , Aug , Jul , Jun , May , Apr , Mar , Feb
- 2021: Dec , Nov , Oct , Sep , Aug , Jul , Jun , May , Apr , Mar , Feb , Jan
- 2020: Dec
The following is a list of advisories for issues resolved in Fortinet products. The resolution of such issues is coordinated by the Fortinet Product Security Incident Response Team (PSIRT), a dedicated, global team that manages the receipt, investigation, and public reporting of information about security vulnerabilities and issues related to Fortinet products and services.
For details of how to raise a PSIRT Issue with Fortinet, please see our PSIRT Policy here.
An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in FortiADC may allow an authe...
A use of a weak cryptographic algorithm vulnerability [CWE-327] in FortiNAC may increase the chances of an attacker to hav...
May 03, 2023
Severity
Low
IR Number: FG-IR-22-452
CVE-2022-45858
Low
IR Number: FG-IR-22-452
CVE-2022-45858
An insufficiently protected credentials vulnerability [CWE-522] in FortiNAC may allow a local attacker with system access ...
FortiNAC
9.4.1, 9.4.0, 9.2.6, 9.2.5, 9.2.4, 9.2.3, 9.2.2, 9.2.1, 9.2.0, 9.1.8, 9.1.7, 9.1.6, 9.1.5, 9.1.4, 9.1.3, 9.1.2, 9.1.1, 9.1.0, 8.8.9, 8.8.8, 8.8.7, 8.8.6, 8.8.5, 8.8.4, 8.8.3, 8.8.2, 8.8.11, 8.8.10, 8.8.1, 8.8.0, 8.7.6, 8.7.5, 8.7.4, 8.7.3, 8.7.2, 8.7.1, 8.7.0
May 03, 2023
Severity
Low
IR Number: FG-IR-22-456
CVE-2022-45859
A URL redirection to untrusted site ('Open Redirect') vulnerability [CWE-601] in FortiNAC may allow an unauthenticated att...
May 03, 2023
Severity
Low
IR Number: FG-IR-22-407
CVE-2022-43950
Low
IR Number: FG-IR-22-407
CVE-2022-43950
An out-of-bounds write vulnerability [CWE-787] in sslvpnd of FortiOS and FortiProxy may allow an authenticated attacker to...
FortiOS
7.2.3, 7.2.2, 7.2.1, 7.2.0, 7.0.9, 7.0.8, 7.0.7, 7.0.6, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.10, 7.0.1, 7.0.0, 6.4.9, 6.4.8, 6.4.7, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.11, 6.4.10, 6.4.1, 6.4.0, 6.2.9, 6.2.8, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.13, 6.2.12, 6.2.11, 6.2.10, 6.2.1, 6.2.0, 6.0.9, 6.0.8, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.16, 6.0.15, 6.0.14, 6.0.13, 6.0.12, 6.0.11, 6.0.10, 6.0.1, 6.0.0
FortiProxy
7.2.1, 7.2.0, 7.0.7, 7.0.6, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0, 2.0.9, 2.0.8, 2.0.7, 2.0.6, 2.0.5, 2.0.4, 2.0.3, 2.0.2, 2.0.12, 2.0.11, 2.0.10, 2.0.1, 2.0.0, 1.2.9, 1.2.8, 1.2.7, 1.2.6, 1.2.5, 1.2.4, 1.2.3, 1.2.2, 1.2.13, 1.2.12, 1.2.11, 1.2.10, 1.2.1, 1.2.0, 1.1.6, 1.1.5, 1.1.4, 1.1.3, 1.1.2, 1.1.1, 1.1.0, 1.0.7, 1.0.6, 1.0.5, 1.0.4, 1.0.3, 1.0.2, 1.0.1, 1.0.0
May 03, 2023
Severity
High
IR Number: FG-IR-22-475
CVE-2023-22640
A security advisory was released affecting a version of the Linux Kernel used in FortiAuthenticator, FortiProxy & FortiSIE...
FortiSIEM
6.4.1, 6.4.0, 6.3.3, 6.3.2, 6.3.1, 6.3.0, 6.2.1, 6.2.0, 6.1.2, 6.1.1, 6.1.0
FortiProxy
7.0.3, 7.0.2, 7.0.1, 7.0.0
FortiAuthenticator
6.4.1, 6.4.0, 6.3.3, 6.3.2, 6.3.1, 6.3.0
Apr 11, 2023
Severity
High
IR Number: FG-IR-22-050
CVE-2022-0847
An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in FortiADC, FortiDDoS and For...
Apr 11, 2023
Severity
High
IR Number: FG-IR-22-335
CVE-2022-40679
High
IR Number: FG-IR-22-335
CVE-2022-40679
An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiADC...
FortiADC
7.1.1, 7.1.0, 7.0.3, 7.0.2, 7.0.1, 7.0.0, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0
Apr 11, 2023
Severity
Low
IR Number: FG-IR-22-439
CVE-2022-43952
FortiClient (Windows) - Arbitrary file creation from unprivileged users due to process impersonation
An incorrect authorization [CWE-863] vulnerability in FortiClient (Windows) may allow a local low privileged attacker to p...
FortiClientWindows
7.0.7, 7.0.6, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0, 6.4.9, 6.4.8, 6.4.7, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.9, 6.2.8, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.0.9, 6.0.8, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.10, 6.0.1, 6.0.0
Apr 11, 2023
Severity
High
IR Number: FG-IR-22-336
CVE-2022-40682
Multiple vulnerabilities including an incorrect permission assignment for critical resource [CWE-732] vulnerability and a ...
FortiClientWindows
7.0.7, 7.0.6, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0, 6.4.9, 6.4.8, 6.4.7, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.9, 6.2.8, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.0.9, 6.0.8, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.10, 6.0.1, 6.0.0
Apr 11, 2023
Severity
High
IR Number: FG-IR-22-429
CVE-2022-43946
A relative path traversal [CWE-23] vulnerability in FortiClientWindows may allow a local low privileged attacker to perfor...
FortiClientWindows
7.0.7, 7.0.6, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0, 6.4.9, 6.4.8, 6.4.7, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.9, 6.2.8, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.0.9, 6.0.8, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.10, 6.0.1, 6.0.0
Apr 11, 2023
Severity
High
IR Number: FG-IR-22-320
CVE-2022-42470
Multiple improper neutralization of input during web page generation ('Cross-site Scripting') vulnerabilities [CWE-79] in ...
FortiProxy
7.2.1, 7.2.0, 7.0.7, 7.0.6, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0
FortiOS
7.2.3, 7.2.2, 7.2.1, 7.2.0, 7.0.9, 7.0.8, 7.0.7, 7.0.6, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0, 6.4.9, 6.4.8, 6.4.7, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.11, 6.4.10, 6.4.1, 6.4.0, 6.2.9, 6.2.8, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.12, 6.2.11, 6.2.10, 6.2.1, 6.2.0
Apr 11, 2023
Severity
High
IR Number: FG-IR-22-363
CVE-2022-41330
A missing authentication for critical function vulnerability [CWE-306] in FortiPresence on-prem infrastructure server may ...
FortiPresence
1.2.1, 1.2.0, 1.1.1, 1.1.0, 1.0.0
Apr 11, 2023
Severity
Critical
IR Number: FG-IR-22-355
CVE-2022-41331
An improper neutralization of special elements used in a template engine vulnerability [CWE-1336] in FortiSOAR management ...
An improper privilege management vulnerability [CWE-269] in FortiSandbox & FortiDeceptor may allow a remote authenticated ...
FortiDeceptor
4.1.0, 4.0.2, 4.0.1, 4.0.0, 3.3.3, 3.3.2, 3.3.1, 3.3.0, 3.2.2, 3.2.1, 3.2.0, 3.1.1, 3.1.0, 3.0.2, 3.0.1, 3.0.0, 2.1.0, 2.0.0, 1.1.0, 1.0.1, 1.0.0
FortiSandbox
4.2.2, 4.2.1, 4.2.0, 4.0.2, 4.0.1, 4.0.0, 3.2.3, 3.2.2, 3.2.1, 3.2.0, 3.1.5, 3.1.4, 3.1.3, 3.1.2, 3.1.1, 3.1.0, 3.0.7, 3.0.6, 3.0.5, 3.0.4, 3.0.3, 3.0.2, 3.0.1, 3.0.0, 2.5.2, 2.5.1, 2.5.0
Apr 11, 2023
Severity
High
IR Number: FG-IR-22-056
CVE-2022-27487