Home/Fortinet/FortiWeb/FortiWeb-1000B

FortiWeb-1000B

Fortinet Appliance · FortiWeb Series

High confidence Official Fortinet notice ↗ Verified
FortiWeb-1000B is dead. Fortinet support ended (-3880d). Last available for order .

Is the FortiWeb-1000B still supported?

No. Fortinet ended support for the FortiWeb-1000B on 2015-12-13. No further security fixes will be issued. See Fortinet's lifecycle bulletin.

When does the FortiWeb-1000B reach end of support?

Fortinet support for the FortiWeb-1000B ends on 2015-12-13.

What replaces the FortiWeb-1000B?

Fortinet has not published a successor model for the FortiWeb-1000B.

What known-exploited CVEs apply to the FortiWeb-1000B past end of support?

5 CVEs in CISA's Known Exploited Vulnerabilities catalog apply to the platform the FortiWeb-1000B runs. These will not be patched on this device because it is past the Fortinet security-support date. See the Known Exploited Vulnerabilities table below for the full list.

Known Exploited Vulnerabilities

This device is past Fortinet's security-support date. 5 CVEs in CISA's Known Exploited Vulnerabilities catalog apply to the platform it runs. Fortinet is not issuing patches for this model. Isolate, compensate, or refresh.

CVE KEV added Vulnerability Flags
CVE-2025-59718 Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability
CVE-2025-58034 Fortinet FortiWeb OS Command Injection Vulnerability
CVE-2025-64446 Fortinet FortiWeb Path Traversal Vulnerability
CVE-2025-25257 Fortinet FortiWeb SQL Injection Vulnerability
CVE-2024-23113 Fortinet Multiple Products Format String Vulnerability

Source: CISA Known Exploited Vulnerabilities catalog. The Ransomware flag reflects CISA's own knownRansomwareCampaignUse field, set when the CVE has been observed in ransomware campaigns per their threat intel. It's not a property of the vulnerability description itself.

Correlation is at the platform level, not per-OS-version. Not exhaustive: KEV only lists actively-exploited CVEs and many relevant unexploited vulnerabilities are not here. Verify against vendor security advisories (PSIRT, JSA, PAN-SA) and NVD before acting. See compensating controls if refresh isn't immediate.

FortiWeb-1000B Lifecycle Overview

The Fortinet FortiWeb-1000B is a appliance product in the Fortinet FortiWeb series. This product has reached end of life as of , meaning Fortinet no longer provides technical support, software updates, or hardware replacement for this product. It was last available for purchase on . Organizations still running the FortiWeb-1000B should plan a migration .

Lifecycle Milestones

End of sale 15y 8mo ago
End of software maintenance 11y 8mo ago
Last date of support 10y 8mo ago
Applicable Platforms
↑ Top