Aller au contenu

Vulnérabilités de Fortinet FortiPortal

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-49938 A improper access control vulnerability in Fortinet FortiPortal 7.4.0 through 7.4.7, FortiPortal 7.2.0 through 7.2.8,… 6.2 Moyenne 9 juin 2026
CVE-2024-40593 A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2, FortiAnalyzer 7.2.0 through… 5.9 Moyenne 11 déc. 2025
CVE-2025-54838 An Incorrect Authorization vulnerability [CWE-863] in FortiPortal 7.4.0 through 7.4.5 may allow an authenticated… 6.4 Moyenne 9 déc. 2025
CVE-2024-45329 A authorization bypass through user-controlled key in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5,… 3.9 Faible 10 juin 2025
CVE-2025-46777 A insertion of sensitive information into log file in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5,… 2.2 Faible 28 mai 2025
CVE-2024-40590 An improper certificate validation vulnerability [CWE-295] in FortiPortal version 7.4.0, version 7.2.4 and below,… 4.4 Moyenne 14 mars 2025
CVE-2025-24470 An Improper Resolution of Path Equivalence vulnerability [CWE-41] in FortiPortal 7.4.0 through 7.4.2, 7.2.0 through… 8.1 Élevée 11 févr. 2025
CVE-2022-23439 A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison… 4.1 Moyenne 22 janv. 2025
CVE-2024-35278 A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiPortal… 4.1 Moyenne 14 janv. 2025
CVE-2024-52967 An improper neutralization of script-related html tags in a web page (basic xss) in Fortinet FortiPortal 6.0.0 through… 3.3 Faible 14 janv. 2025
CVE-2024-26011 A missing authentication for critical function vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2,… 5.2 Moyenne 12 nov. 2024
CVE-2023-47543 An authorization bypass through user-controlled key vulnerability [CWE-639] in Fortinet FortiPortal version 7.0.0… 5.1 Moyenne 12 nov. 2024
CVE-2024-21759 An authorization bypass through user-controlled key in Fortinet FortiPortal version 7.2.0, and versions 7.0.0 through… 3.9 Faible 9 juil. 2024
CVE-2024-31495 A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiPortal… 3.9 Faible 11 juin 2024
CVE-2023-48789 A client-side enforcement of server-side security in Fortinet FortiPortal version 6.0.0 through 6.0.14 allows attacker… 4.1 Moyenne 3 juin 2024
CVE-2024-23105 A Use Of Less Trusted Source [CWE-348] vulnerability in Fortinet FortiPortal version 7.0.0 through 7.0.6 and version… 7.1 Élevée 14 mai 2024
CVE-2024-21761 An improper authorization vulnerability [CWE-285] in FortiPortal version 7.2.0, and versions 7.0.6 and below reports may… 3.9 Faible 12 mars 2024
CVE-2023-41842 A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet allows a privileged… 6.3 Moyenne 12 mars 2024
CVE-2023-48783 An Authorization Bypass Through User-Controlled Key vulnerability [CWE-639] affecting PortiPortal version 7.2.1 and… 4.9 Moyenne 10 janv. 2024
CVE-2023-46712 A improper access control in Fortinet FortiPortal version 7.0.0 through 7.0.6, Fortinet FortiPortal version 7.2.0… 6.3 Moyenne 10 janv. 2024
CVE-2023-48791 An improper neutralization of special elements used in a command ('Command Injection') vulnerability [CWE-77] in… 7.9 Élevée 13 déc. 2023
CVE-2022-27490 A exposure of sensitive information to an unauthorized actor in Fortinet FortiManager version 6.0.0 through 6.0.4,… 5.1 Moyenne 7 mars 2023
CVE-2022-43954 An insertion of sensitive information into log file vulnerability [CWE-532] in the FortiPortal management… 4.1 Moyenne 16 févr. 2023
CVE-2022-41336 An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiPortal versions 6.0.0… 6.6 Moyenne 3 janv. 2023
CVE-2021-42757 A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may… 6.3 Moyenne 8 déc. 2021

Autres produits Fortinet