| CVE-2024-23104 |
An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiNDR 7.6.0, FortiNDR 7.4.0…
|
5.4
Medium
|
Apr 14, 2026 |
| CVE-2025-55717 |
A cleartext storage of sensitive information vulnerability [CWE-312] vulnerability in Fortinet FortiMail 7.6.0 through…
|
3.8
Low
|
Mar 10, 2026 |
| CVE-2025-58693 |
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiVoice…
|
5.7
Medium
|
Jan 13, 2026 |
| CVE-2025-64156 |
An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet…
|
6.8
Medium
|
Dec 9, 2025 |
| CVE-2025-60024 |
Multiple Improper Limitations of a Pathname to a Restricted Directory ('Path Traversal') vulnerabilities [CWE-22]…
|
7.7
High
|
Dec 9, 2025 |
| CVE-2025-58692 |
An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89]…
|
7.7
High
|
Nov 18, 2025 |
| CVE-2024-47569 |
A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail…
|
4.2
Medium
|
Oct 14, 2025 |
| CVE-2025-47856 |
Two improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities…
|
7.2
High
|
Oct 14, 2025 |
| CVE-2024-40588 |
Multiple relative path traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiCamera 2.1 all versions,…
|
4.2
Medium
|
Aug 12, 2025 |
| CVE-2025-32756 |
Exploited
Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability
|
9.6
Critical
|
May 13, 2025 |
| CVE-2024-50565 |
A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS…
|
3.0
Low
|
Apr 8, 2025 |
| CVE-2022-23439 |
A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison…
|
4.1
Medium
|
Jan 22, 2025 |
| CVE-2024-48885 |
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiRecorder…
|
5.2
Medium
|
Jan 16, 2025 |
| CVE-2023-37931 |
An improper neutralization of special elements used in an sql command ('sql injection') vulnerability [CWE-88] in…
|
8.6
High
|
Jan 14, 2025 |
| CVE-2024-40587 |
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78]…
|
6.3
Medium
|
Jan 14, 2025 |
| CVE-2023-40720 |
An authorization bypass through user-controlled key vulnerability [CWE-639] in FortiVoiceEntreprise version 7.0.0…
|
6.7
Medium
|
May 14, 2024 |
| CVE-2023-37932 |
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability [CWE-22] in…
|
6.2
Medium
|
Jan 10, 2024 |
| CVE-2022-27488 |
A cross-site request forgery (CSRF) in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x, FortiSwitch version 7.0.0…
|
7.5
High
|
Dec 13, 2023 |
| CVE-2021-36193 |
Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an…
|
6.3
Medium
|
Feb 2, 2022 |
| CVE-2021-42757 |
A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may…
|
6.3
Medium
|
Dec 8, 2021 |