Skip to content

Known vulnerabilities in Fortinet FortiAnalyzer

Is your version affected?

CVE Summary Score Published
CVE-2024-40584 An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78]… 6.8 Medium Feb 11, 2025
CVE-2024-36508 An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet… 5.9 Medium Feb 11, 2025
CVE-2024-52966 An exposure of sensitive information to an unauthorized actor in Fortinet FortiAnalyzer 6.4.0 through 7.6.0 allows… 2.2 Low Feb 11, 2025
CVE-2022-23439 A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison… 4.1 Medium Jan 22, 2025
CVE-2024-50563 A weak authentication in Fortinet FortiManager Cloud, FortiAnalyzer versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3,… 6.7 Medium Jan 16, 2025
CVE-2024-45331 A incorrect privilege assignment vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7.2.0… 6.9 Medium Jan 16, 2025
CVE-2024-33502 An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager,… 6.4 Medium Jan 14, 2025
CVE-2024-35273 A out-of-bounds write in Fortinet FortiManager version 7.4.0 through 7.4.2, FortiAnalyzer version 7.4.0 through 7.4.2… 7.0 High Jan 14, 2025
CVE-2024-35276 A stack-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7.2.0 through… 5.0 Medium Jan 14, 2025
CVE-2024-35275 A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiAnalyzer version… 6.5 Medium Jan 14, 2025
CVE-2024-36512 An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager,… 7.0 High Jan 14, 2025
CVE-2021-32589 A Use After Free (CWE-416) vulnerability in FortiManager version 7.0.0, version 6.4.5 and below, version 6.2.7 and… 7.7 High Dec 19, 2024
CVE-2024-31496 A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before… 6.3 Medium Nov 12, 2024
CVE-2024-35274 An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet… 2.2 Low Nov 12, 2024
CVE-2024-33505 A heap-based buffer overflow in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through… 5.3 Medium Nov 12, 2024
CVE-2024-32118 Multiple improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities… 6.3 Medium Nov 12, 2024
CVE-2024-32116 Multiple relative path traversal vulnerabilities [CWE-23] in Fortinet FortiManager version 7.4.0 through 7.4.2 and… 4.8 Medium Nov 12, 2024
CVE-2023-44255 An exposure of sensitive information to an unauthorized actor [CWE-200] in Fortinet FortiManager before 7.4.2,… 3.9 Low Nov 12, 2024
CVE-2024-32117 An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet… 4.7 Medium Nov 12, 2024
CVE-2024-23666 A client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigData at least version 7.4.0 and 7.2.0… 7.1 High Nov 12, 2024
CVE-2024-45330 A use of externally-controlled format string in Fortinet FortiAnalyzer versions 7.4.0 through 7.4.3, 7.2.2 through 7.2.5… 6.8 Medium Oct 8, 2024
CVE-2023-44254 An authorization bypass through user-controlled key [CWE-639] vulnerability in FortiAnalyzer version 7.4.1 and before… 4.7 Medium Sep 10, 2024
CVE-2024-21757 A unverified password change in Fortinet FortiManager versions 7.0.0 through 7.0.10, versions 7.2.0 through 7.2.4, and… 5.5 Medium Aug 13, 2024
CVE-2023-41842 A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet allows a privileged… 6.3 Medium Mar 12, 2024
CVE-2023-42791 A relative path traversal in Fortinet FortiManager version 7.4.0 and 7.2.0 through 7.2.3 and 7.0.0 through 7.0.8 and… 8.6 High Feb 20, 2024

Other Fortinet products