Filtered by vendor Fortinet Subscriptions
Filtered by product Fortios Ips Engine Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-40718 1 Fortinet 2 Fortios, Fortios Ips Engine 2024-11-21 6.7 Medium
A interpretation conflict in Fortinet IPS Engine versions 7.321, 7.166 and 6.158 allows attacker to evade IPS features via crafted TCP packets.
CVE-2019-5592 1 Fortinet 1 Fortios Ips Engine 2024-11-21 5.9 Medium
Multiple padding oracle vulnerabilities (Zombie POODLE, GOLDENDOODLE, OpenSSL 0-length) in the CBC padding implementation of FortiOS IPS engine version 5.000 to 5.006, 4.000 to 4.036, 4.200 to 4.219, 3.547 and below, when configured with SSL Deep Inspection policies and with the IPS sensor enabled, may allow an attacker to decipher TLS connections going through the FortiGate via monitoring the traffic in a Man-in-the-middle position.