Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Fortinet

Fortinet FortiDDoS-F vulnerabilities

9 published CVEs name Fortinet FortiDDoS-F among the affected products.

Published CVEs
9
Last 12 months
1
Critical
0
Known exploited
0

Critical 0High 2Medium 7Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20211
  2. 20221
  3. 20233
  4. 20241
  5. 20252
  6. 20261

Newest CVEs

  • CVE-2026-39815

    A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiDDoS-F 7.2.1 through 7.2.2 may allow…

    Fortinet · FortiDDoS-F

    High7.9
  • CVE-2024-45325

    An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiDDoS-F version 7.0.0…

    Fortinet · FortiDDoS-F

    Medium6.5
  • CVE-2022-23439

    A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests,…

    Fortinet · FortiTester

    Medium4.1
  • CVE-2022-27486

    A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiDDoS version 5.5.0 through 5.5.1, 5.4.2 through…

    Fortinet · FortiDDoS

    Medium5.9
  • CVE-2023-25603

    A permissive cross-domain policy with untrusted domains vulnerability in Fortinet FortiADC 7.1.0 - 7.1.1, FortiDDoS-F 6.3.0 - 6.3.4 and 6.4.0 - 6.4.1 allow an…

    Fortinet · FortiDDoS-F

    Medium5.4
  • CVE-2023-29177

    Multiple buffer copy without checking size of input ('classic buffer overflow') vulnerabilities [CWE-120] in FortiADC version 7.2.0 and before 7.1.2 &…

    Fortinet · FortiDDoS-F

    Medium6.2
  • CVE-2022-40679

    An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in FortiADC 5.x all versions, 6.0 all versions, 6.1 all versions,…

    Fortinet · FortiDDoS

    High7.1
  • CVE-2021-36193

    Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an authenticated attacker to achieve arbitrary code…

    Fortinet · FortiFone

    Medium6.3
  • CVE-2021-42757

    A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authenticated local attacker to…

    Fortinet · FortiOS

    Medium6.3