Fortiadc (Fortinet) - vulnerabilities (CVEs)

43 CVEs, 0 in the last 30 days, 275 known versions, newest CVE from 2025-11-19. Vendor: Fortinet.

CVEs of Fortiadc

CVE-2025-58412 - CVSS 6.1 (medium), 2025-11-19: A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiADC 8.0.0, FortiADC 7.6.0 through 7.6.3,…
CVE-2025-54971 - CVSS 6.5 (medium), 2025-11-18: An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiADC 7.4.0, FortiADC 7.2 all versions, FortiADC 7.1 all versions,…
CVE-2025-48839 - CVSS 6.6 (medium), 2025-11-18: An Out-of-bounds Write vulnerability [CWE-787] in FortiADC 8.0.0, 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2 all versions, 7.1 all versions, 7.0 all…
CVE-2025-59921 - CVSS 6.5 (medium), 2025-10-14: An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiADC version 7.4.0, version 7.2.3 and below, version…
CVE-2025-49813 - CVSS 7.2 (high), 2025-08-12: An improper neutralization of special elements used in an OS Command ("OS Command Injection") vulnerability [CWE-78] in Fortinet FortiADC version 7.2.0 and…
CVE-2025-31104 - CVSS 7.2 (high), 2025-06-10: A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiADC 7.6.0 through 7.6.1, FortiADC…
CVE-2023-37933 - CVSS 8.8 (high), 2025-03-11: An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiADC GUI version 7.4.0, 7.2.0 through…
CVE-2022-23439 - CVSS 6.1 (medium), 2025-01-22: A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests,…
CVE-2024-36511 - CVSS 3.7 (low), 2024-09-10: An improperly implemented security check for standard vulnerability [CWE-358] in FortiADC Web Application Firewall (WAF) 7.4.0 through 7.4.4, 7.2 all…
CVE-2023-50181 - CVSS 6.5 (medium), 2024-07-09: An improper access control vulnerability [CWE-284] in Fortinet FortiADC version 7.4.0 through 7.4.1 and before 7.2.4 allows a read only authenticated attacker…
CVE-2023-50179 - CVSS 5.9 (medium), 2024-07-09: An improper certificate validation vulnerability [CWE-295] in FortiADC 7.4.0, 7.2 all versions, 7.1 all versions, 7.0 all versions may allow a remote and…
CVE-2023-50178 - CVSS 7.4 (high), 2024-07-09: An improper certificate validation vulnerability [CWE-295] in FortiADC 7.4.0, 7.2.0 through 7.2.3, 7.1 all versions, 7.0 all versions, 6.2 all versions, 6.1…
CVE-2023-50180 - CVSS 5.5 (medium), 2024-05-14: An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiADC version 7.4.1 and below, version 7.2.3 and…
CVE-2023-41673 - CVSS 7.1 (high), 2023-12-13: An improper authorization vulnerability [CWE-285] in Fortinet FortiADC version 7.4.0 and before 7.2.2 may allow a low privileged user to read or backup the…
CVE-2023-29177 - CVSS 6.7 (medium), 2023-11-14: Multiple buffer copy without checking size of input ('classic buffer overflow') vulnerabilities [CWE-120] in FortiADC version 7.2.0 and before 7.1.2 &…
CVE-2023-25603 - CVSS 9.1 (critical), 2023-11-14: A permissive cross-domain policy with untrusted domains vulnerability in Fortinet FortiADC 7.1.0 - 7.1.1, FortiDDoS-F 6.3.0 - 6.3.4 and 6.4.0 - 6.4.1 allow an…
CVE-2023-26205 - CVSS 8.8 (high), 2023-11-14: An improper access control vulnerability [CWE-284] in FortiADC automation feature 7.1.0 through 7.1.2, 7.0 all versions, 6.2 all versions, 6.1 all versions…
CVE-2023-25607 - CVSS 7.8 (high), 2023-10-10: An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78 ] in FortiManager 7.2.0 through 7.2.2,…
CVE-2022-35849 - CVSS 8.8 (high), 2023-09-13: An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface of FortiADC 7.1.0 through 7.1.1, 7.0.0…
CVE-2023-28000 - CVSS 7.8 (high), 2023-06-13: An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in FortiADC CLI 7.1.0, 7.0.0 through 7.0.3, 6.2.0 through 6.2.4,…
CVE-2023-26210 - CVSS 7.8 (high), 2023-06-13: Multiple improper neutralization of special elements used in an os command ('OS Command Injection') vulnerabilties [CWE-78] vulnerability in Fortinet allows a…
CVE-2023-27999 - CVSS 7.8 (high), 2023-05-03: An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in FortiADC 7.2.0, 7.1.0 through 7.1.1 may allow an authenticated…
CVE-2023-27993 - CVSS 7.1 (high), 2023-05-03: A relative path traversal [CWE-23] in Fortinet FortiADC version 7.2.0 and before 7.1.1 allows a privileged attacker to delete arbitrary directories from the…
CVE-2022-43952 - CVSS 5.4 (medium), 2023-04-11: An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiADC version 7.1.1 and below, version…
CVE-2022-43948 - CVSS 7.8 (high), 2023-04-11: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb version 7.0.0 through 7.0.3, FortiADC…
CVE-2022-40679 - CVSS 7.8 (high), 2023-04-11: An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in FortiADC 5.x all versions, 6.0 all versions, 6.1 all versions,…
CVE-2022-27482 - CVSS 7.8 (high), 2023-02-16: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiADC version 7.0.0 through 7.0.1, 6.2.0 through…
CVE-2022-39947 - CVSS 8.8 (high), 2023-01-03: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiADC version 7.0.0 through 7.0.2, FortiADC…
CVE-2022-33876 - CVSS 6.5 (medium), 2022-12-06: Multiple instances of improper input validation vulnerability in Fortinet FortiADC version 7.1.0, version 7.0.0 through 7.0.2 and version 6.2.4 and below…
CVE-2022-33875 - CVSS 8.8 (high), 2022-12-06: An improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerability in Fortinet FortiADC version 7.1.0, version 7.0.0…
CVE-2022-38374 - CVSS 8.8 (high), 2022-11-02: A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiADC 7.0.0 - 7.0.2 and 6.2.0 - 6.2.4 allows an attacker…
CVE-2022-38381 - CVSS 9.8 (critical), 2022-11-02: An improper handling of malformed request vulnerability [CWE-228] exists in FortiADC 5.0 all versions, 6.0.0 all versions, 6.1.0 all versions, 6.2.0 through…
CVE-2022-35851 - CVSS 8 (high), 2022-11-02: An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiADC management interface 7.1.0 may allow a remote and…
CVE-2021-43076 - CVSS 6.5 (medium), 2022-09-06: An improper privilege management vulnerability [CWE-269] in FortiADC versions 6.2.1 and below, 6.1.5 and below, 6.0.4 and below, 5.4.5 and below and 5.3.7 and…
CVE-2022-22299 - CVSS 7.8 (high), 2022-08-05: A format string vulnerability [CWE-134] in the command line interpreter of FortiADC version 6.0.0 through 6.0.4, FortiADC version 6.1.0 through 6.1.5,…
CVE-2022-27484 - CVSS 5.4 (medium), 2022-08-03: A unverified password change in Fortinet FortiADC version 6.2.0 through 6.2.3, 6.1.x, 6.0.x, 5.x.x allows an authenticated attacker to bypass the Old Password…
CVE-2022-26120 - CVSS 8.8 (high), 2022-07-18: Multiple improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerabilities [CWE-89] in FortiADC management interface 7.0.0…
CVE-2021-36193 - CVSS 7.2 (high), 2022-02-02: Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an authenticated attacker to achieve arbitrary code…
CVE-2021-32591 - CVSS 5.3 (medium), 2021-12-08: A missing cryptographic steps vulnerability in the function that encrypts users' LDAP and RADIUS credentials in FortiSandbox before 4.0.1, FortiWeb before…
CVE-2021-42757 - CVSS 6.7 (medium), 2021-12-08: A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authenticated local attacker to…
CVE-2020-15935 - CVSS 4.3 (medium), 2021-11-02: A cleartext storage of sensitive information in GUI in FortiADC versions 5.4.3 and below, 6.0.0 and below may allow a remote authenticated attacker to…
CVE-2021-24024 - CVSS 6.5 (medium), 2021-04-12: A clear text storage of sensitive information into log file vulnerability in FortiADCManager 5.3.0 and below, 5.2.1 and below and FortiADC 5.3.7 and below may…
CVE-2019-6699 - CVSS 5.4 (medium), 2020-03-13: An improper neutralization of input vulnerability in Fortinet FortiADC 5.3.3 and earlier may allow an attacker to execute a stored Cross Site Scripting (XSS)…
CVE-2018-13374 - CVSS 4.3 (medium), 2019-01-22: A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to obtain the LDAP…