Skip to content

Vulnerabilities of Fortinet FortiPAM

Is your version affected?

CVE Summary Score Published
CVE-2023-40721 A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet allows a privileged… 6.3 Medium Feb 11, 2025
CVE-2024-46670 An Out-of-bounds Read vulnerability [CWE-125] in FortiOS version 7.6.0, version 7.4.4 and below, version 7.2.9 and below… 7.5 High Jan 14, 2025
CVE-2024-52963 A out-of-bounds write in Fortinet FortiOS versions 7.6.0, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through… 3.5 Low Jan 14, 2025
CVE-2024-26011 A missing authentication for critical function vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2,… 5.2 Medium Nov 12, 2024
CVE-2022-45862 An insufficient session expiration vulnerability [CWE-613] vulnerability in FortiOS 7.2.5 and below, 7.0 all versions,… 3.5 Low Aug 13, 2024
CVE-2024-26010 A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.3, FortiOS 7.2.0 through 7.2.7,… 6.7 Medium Jun 11, 2024
CVE-2023-36640 A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5,… 6.2 Medium May 14, 2024
CVE-2023-45583 A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5,… 6.2 Medium May 14, 2024
CVE-2023-42789 A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS… 9.3 Critical Mar 12, 2024
CVE-2023-29181 A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4, FortiOS 7.0.0… 8.3 High Feb 22, 2024
CVE-2024-23113 Exploited Fortinet Multiple Products Format String Vulnerability 9.8 Critical Feb 15, 2024
CVE-2023-37934 An allocation of resources without limits or throttling vulnerability [CWE-770] in FortiPAM 1.0 all versions allows an… 4.2 Medium Jan 10, 2024
CVE-2023-41678 A double free in Fortinet FortiOS versions 7.0.0 through 7.0.5, FortiPAM version 1.0.0 through 1.0.3, 1.1.0 through… 8.3 High Dec 13, 2023
CVE-2023-36639 A use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.4, 7.0.0 through… 7.0 High Dec 13, 2023

Other Fortinet products