Skip to content

Vulnerabilities of Fortinet FortiPortal

Is your version affected?

CVE Summary Score Published
CVE-2026-49938 A improper access control vulnerability in Fortinet FortiPortal 7.4.0 through 7.4.7, FortiPortal 7.2.0 through 7.2.8,… 6.2 Medium Jun 9, 2026
CVE-2024-40593 A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2, FortiAnalyzer 7.2.0 through… 5.9 Medium Dec 11, 2025
CVE-2025-54838 An Incorrect Authorization vulnerability [CWE-863] in FortiPortal 7.4.0 through 7.4.5 may allow an authenticated… 6.4 Medium Dec 9, 2025
CVE-2024-45329 A authorization bypass through user-controlled key in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5,… 3.9 Low Jun 10, 2025
CVE-2025-46777 A insertion of sensitive information into log file in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5,… 2.2 Low May 28, 2025
CVE-2024-40590 An improper certificate validation vulnerability [CWE-295] in FortiPortal version 7.4.0, version 7.2.4 and below,… 4.4 Medium Mar 14, 2025
CVE-2025-24470 An Improper Resolution of Path Equivalence vulnerability [CWE-41] in FortiPortal 7.4.0 through 7.4.2, 7.2.0 through… 8.1 High Feb 11, 2025
CVE-2022-23439 A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison… 4.1 Medium Jan 22, 2025
CVE-2024-35278 A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiPortal… 4.1 Medium Jan 14, 2025
CVE-2024-52967 An improper neutralization of script-related html tags in a web page (basic xss) in Fortinet FortiPortal 6.0.0 through… 3.3 Low Jan 14, 2025
CVE-2024-26011 A missing authentication for critical function vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2,… 5.2 Medium Nov 12, 2024
CVE-2023-47543 An authorization bypass through user-controlled key vulnerability [CWE-639] in Fortinet FortiPortal version 7.0.0… 5.1 Medium Nov 12, 2024
CVE-2024-21759 An authorization bypass through user-controlled key in Fortinet FortiPortal version 7.2.0, and versions 7.0.0 through… 3.9 Low Jul 9, 2024
CVE-2024-31495 A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiPortal… 3.9 Low Jun 11, 2024
CVE-2023-48789 A client-side enforcement of server-side security in Fortinet FortiPortal version 6.0.0 through 6.0.14 allows attacker… 4.1 Medium Jun 3, 2024
CVE-2024-23105 A Use Of Less Trusted Source [CWE-348] vulnerability in Fortinet FortiPortal version 7.0.0 through 7.0.6 and version… 7.1 High May 14, 2024
CVE-2024-21761 An improper authorization vulnerability [CWE-285] in FortiPortal version 7.2.0, and versions 7.0.6 and below reports may… 3.9 Low Mar 12, 2024
CVE-2023-41842 A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet allows a privileged… 6.3 Medium Mar 12, 2024
CVE-2023-48783 An Authorization Bypass Through User-Controlled Key vulnerability [CWE-639] affecting PortiPortal version 7.2.1 and… 4.9 Medium Jan 10, 2024
CVE-2023-46712 A improper access control in Fortinet FortiPortal version 7.0.0 through 7.0.6, Fortinet FortiPortal version 7.2.0… 6.3 Medium Jan 10, 2024
CVE-2023-48791 An improper neutralization of special elements used in a command ('Command Injection') vulnerability [CWE-77] in… 7.9 High Dec 13, 2023
CVE-2022-27490 A exposure of sensitive information to an unauthorized actor in Fortinet FortiManager version 6.0.0 through 6.0.4,… 5.1 Medium Mar 7, 2023
CVE-2022-43954 An insertion of sensitive information into log file vulnerability [CWE-532] in the FortiPortal management… 4.1 Medium Feb 16, 2023
CVE-2022-41336 An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiPortal versions 6.0.0… 6.6 Medium Jan 3, 2023
CVE-2021-42757 A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may… 6.3 Medium Dec 8, 2021

Other Fortinet products