Skip to content
VulniPulse
Sign in

Fortinet Security Advisories & CVEs

141 advisories tracked · FortiGuard PSIRT Advisories · direct feeds checked every minute; rate-limited backstops use a safe source cadence

Android app · Google Play

Monitor Fortinet CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Get CVE alertsSee app features

Check if your Fortinet device is affected

Pick your product and enter the exact software release it runs. We match it against the affected/fixed versions in Fortinet's recent advisories.

Official source

FortiGuard PSIRT Advisories

Polled via the official FortiGuard PSIRT RSS feed (filestore.fortinet.com). PSIRT pages are fetched for new items to extract affected and fixed versions.

Visit Fortinet security advisories Fortinet RSS feed Fortinet end-of-life dates(1 product family)

Latest Fortinet advisories

All severitiescriticalhighmediumlow
All platformsFortiGateFirewallsFortiOSFortiManagerFortiAnalyzerFortiWebFortiClientFortiProxyFortiNAC
Medium4.3Fortinet Exploited CISA KEV

Medium [CVE-2018-13374] Fortinet FortiOS, fortiADC: Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to obtain the LDAP server login credentials configured in FortiGate via pointing a LDAP server connectivity test request to a rogue LDAP server instead of the configured one

A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to obtain the LDAP server login credentials configured in FortiGate via pointing a LDAP server connectivity test request to a rogue LDAP server instead of the configured one. Affected product named by the advisory: Fortinet FortiOS, fortiADC.

CVE-2018-13374
FortiGateFirewallFortiOS
Jan 22, 2019

← All vendors