Fortinet FortiADC vulnerabilities
33 published CVEs name Fortinet FortiADC among the affected products.
- Published CVEs
- 33
- Last 12 months
- 3
- Critical
- 0
- Known exploited
- 0
Critical 0High 11Medium 19Low 3Not scored 0
CVEs per yearBy the year they were published
- 20223
- 20239
- 20241
- 202414
- 20256
Newest CVEs
- CVE-2025-58412
A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiADC 8.0.0, FortiADC 7.6.0 through 7.6.3,…
Fortinet · FortiADC
Medium4.2 - CVE-2025-48839
An Out-of-bounds Write vulnerability [CWE-787] in FortiADC 8.0.0, 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2 all versions, 7.1 all versions, 7.0 all…
Fortinet · FortiADC
Medium6.3 - CVE-2025-54971
An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiADC 7.4.0, FortiADC 7.2 all versions, FortiADC 7.1 all versions,…
Fortinet · FortiADC
Low3.9 - CVE-2025-59921
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiADC version 7.4.0, version 7.2.3 and below, version…
Fortinet · FortiADC
Medium6.2 - CVE-2025-49813
An improper neutralization of special elements used in an OS Command ("OS Command Injection") vulnerability [CWE-78] in Fortinet FortiADC version 7.2.0 and…
Fortinet · FortiADC
Medium6.6 - CVE-2025-31104
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiADC 7.6.0 through 7.6.1, FortiADC…
Fortinet · FortiADC
High7.0 - CVE-2023-37933
An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiADC GUI version 7.4.0, 7.2.0 through…
Fortinet · FortiADC
High8.6 - CVE-2022-23439
A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests,…
Fortinet · FortiTester
Medium4.1 - CVE-2024-36511
An improperly implemented security check for standard vulnerability [CWE-358] in FortiADC Web Application Firewall (WAF) 7.4.0 through 7.4.4, 7.2 all versions,…
Fortinet · FortiADC
Low3.4 - CVE-2023-50178
An improper certificate validation vulnerability [CWE-295] in FortiADC 7.4.0, 7.2.0 through 7.2.3, 7.1 all versions, 7.0 all versions, 6.2 all versions, 6.1…
Fortinet · FortiADC
High7.2
Most common weaknesses
- CWE-78 OS command injection11
- CWE-787 Out-of-bounds write3
- CWE-120 Classic buffer overflow2
- CWE-200 Exposure of sensitive information2
- CWE-284 Improper access control2
- CWE-295 Improper certificate validation2
- CWE-79 Cross-site scripting (XSS)2
- CWE-121 Stack-based buffer overflow1
- CWE-20 Improper input validation1
- CWE-22 Path traversal1