| CVE-2024-23104 |
An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiNDR 7.6.0, FortiNDR 7.4.0…
|
5.4
Moyenne
|
14 avr. 2026 |
| CVE-2025-55717 |
A cleartext storage of sensitive information vulnerability [CWE-312] vulnerability in Fortinet FortiMail 7.6.0 through…
|
3.8
Faible
|
10 mars 2026 |
| CVE-2025-58693 |
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiVoice…
|
5.7
Moyenne
|
13 janv. 2026 |
| CVE-2025-64156 |
An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet…
|
6.8
Moyenne
|
9 déc. 2025 |
| CVE-2025-60024 |
Multiple Improper Limitations of a Pathname to a Restricted Directory ('Path Traversal') vulnerabilities [CWE-22]…
|
7.7
Élevée
|
9 déc. 2025 |
| CVE-2025-58692 |
An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89]…
|
7.7
Élevée
|
18 nov. 2025 |
| CVE-2024-47569 |
A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail…
|
4.2
Moyenne
|
14 oct. 2025 |
| CVE-2025-47856 |
Two improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities…
|
7.2
Élevée
|
14 oct. 2025 |
| CVE-2024-40588 |
Multiple relative path traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiCamera 2.1 all versions,…
|
4.2
Moyenne
|
12 août 2025 |
| CVE-2025-32756 |
Exploitée
Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability
|
9.6
Critique
|
13 mai 2025 |
| CVE-2024-50565 |
A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS…
|
3.0
Faible
|
8 avr. 2025 |
| CVE-2022-23439 |
A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison…
|
4.1
Moyenne
|
22 janv. 2025 |
| CVE-2024-48885 |
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiRecorder…
|
5.2
Moyenne
|
16 janv. 2025 |
| CVE-2023-37931 |
An improper neutralization of special elements used in an sql command ('sql injection') vulnerability [CWE-88] in…
|
8.6
Élevée
|
14 janv. 2025 |
| CVE-2024-40587 |
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78]…
|
6.3
Moyenne
|
14 janv. 2025 |
| CVE-2023-40720 |
An authorization bypass through user-controlled key vulnerability [CWE-639] in FortiVoiceEntreprise version 7.0.0…
|
6.7
Moyenne
|
14 mai 2024 |
| CVE-2023-37932 |
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability [CWE-22] in…
|
6.2
Moyenne
|
10 janv. 2024 |
| CVE-2022-27488 |
A cross-site request forgery (CSRF) in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x, FortiSwitch version 7.0.0…
|
7.5
Élevée
|
13 déc. 2023 |
| CVE-2021-36193 |
Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an…
|
6.3
Moyenne
|
2 févr. 2022 |
| CVE-2021-42757 |
A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may…
|
6.3
Moyenne
|
8 déc. 2021 |