组合风险、利用情报和受影响对象，快速定位需要优先处置的漏洞。
| 漏洞与影响对象 | 漏洞类型 | 风险等级 | CVSS | EPSS | PoC 状态 | 披露时间 | |
|---|---|---|---|---|---|---|---|
| Fortinet Authentication Bypass | 身份验证绕过 | 严重 | 9.8 | 94.1% | PoC | ||
| Fortinet SSL-VPN - Heap-Based Buffer Overflow | 缓冲区溢出 | 中危 | 6.5 | 0.25% | PoC | ||
| CVE-2024-21762 | 远程代码执行 | 严重 | 9.8 | 83.4% | PoC | ||
| CVE-2023-27997 | 缓冲区溢出 | 严重 | 9.8 | 85.7% | PoC | ||
| Fortinet SSL-VPN - Heap-Based Buffer Overflow | 远程代码执行 | 严重 | 9.8 | 99.5% | PoC | ||
| CVE-2018-13382 | 访问控制错误 | 高危 | 9.1 | 81.7% | PoC | ||
| Fortinet FortiOS - Cross-Site Scripting | 跨站脚本攻击 | 中危 | 6.1 | 62.5% | PoC | ||
| Fortinet FortiOS - Credentials Disclosure | 文件包含 | 严重 | 9.8 | 100.0% | PoC | ||
| FortiGate FortiOS SSL VPN Web Portal - Cross-Site Scripting | 跨站脚本攻击 | 中危 | 5.4 | 3.7% | PoC | ||
| FortiOS 5.4.0 to 5.6.0 - Cross-Site Scripting | 跨站脚本攻击 | 中危 | 5.4 | 7.7% | PoC | ||
| Fortinet FortiOS < 5.6.0 - Cross-Site Scripting | 跨站脚本攻击 | 中危 | 6.1 | 8.1% | PoC | ||
| Fortinet FortiOS < 5.6.0 - Cross-Site Scripting | 跨站脚本攻击 | 中危 | 6.1 | 10.7% | PoC | ||
| CVE-2016-6909 | 缓冲区溢出 | 严重 | 9.8 | 49.9% | PoC | ||
| Fortinet FortiOS - Open Redirect/Cross-Site Scripting | 跨站脚本攻击 | 中危 | 6.1 | 5.9% | PoC | ||
| CVE-2016-1909 | 访问控制错误 | 严重 | 9.8 | 71.3% | PoC | ||
| Fortinet FortiOS <=5.2.3 - Cross-Site Scripting | 跨站脚本攻击 | 中危 | 4.3 | 14.2% | PoC |