6.3
Medium
CVE-2025-68482 A improper certificate validation vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0…
Description
A improper certificate validation vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.8, FortiManager 7.2 all versions, FortiManager 7.0 all versions, FortiManager 6.4 all versions may allow a remote unauthenticated attacker to view confidential information via a man in the middle [MiTM] attack.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiAnalyzer 7.6 | 7.6.0 → 7.6.4 | No fix stated |
| FortiAnalyzer 7.4 | 7.4.0 → 7.4.8 | No fix stated |
| FortiAnalyzer 7.2 | 7.2.0 → 7.2.12 | No fix stated |
| FortiAnalyzer 7.0 | 7.0.0 → 7.0.16 | No fix stated |
| FortiAnalyzer 6.4 | 6.4.0 → 6.4.15 | No fix stated |
| FortiManager 7.6 | 7.6.0 → 7.6.4 | No fix stated |
| FortiManager 7.4 | 7.4.0 → 7.4.8 | No fix stated |
| FortiManager 7.2 | 7.2.0 → 7.2.12 | No fix stated |
| FortiManager 7.0 | 7.0.0 → 7.0.16 | No fix stated |
Show the 11 other branches Hide the 11 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiManager 6.4 | 6.4.0 → 6.4.15 | No fix stated |
| FortiManager Cloud 7.6 | 7.6.2 → 7.6.3 | No fix stated |
| FortiManager Cloud 7.4 | 7.4.1 → 7.4.7 | No fix stated |
| FortiManager Cloud 7.2 | 7.2.1 → 7.2.10 | No fix stated |
| FortiManager Cloud 7.0 | 7.0.1 → 7.0.14 | No fix stated |
| FortiManager Cloud 6.4 | 6.4.1 → 6.4.7 | No fix stated |
| FortiAnalyzer Cloud | 7.6.2 | No fix stated |
| FortiAnalyzer Cloud 7.4 | 7.4.1 → 7.4.7 | No fix stated |
| FortiAnalyzer Cloud 7.2 | 7.2.1 → 7.2.10 | No fix stated |
| FortiAnalyzer Cloud 7.0 | 7.0.1 → 7.0.14 | No fix stated |
| FortiAnalyzer Cloud 6.4 | 6.4.1 → 6.4.7 | No fix stated |
Other CVEs of FortiAnalyzer
The 74 CVEs of FortiAnalyzer →
CVE-2026-23707
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89]…
6.5
Medium
CVE-2025-46773
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89]…
7.9
High
CVE-2026-23706
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89]…
5.9
Medium
CVE-2026-23705
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89]…
6.5
Medium