Skip to content

Fortinet Fortipam vulnerabilities

fortinet fortios, fortipam +1 moreA path traversal: '../filedir' vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6...CVE-2026-1262557.4 HighNovember 11, 2026
fortinet fortipam chrome extensionA improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome...CVE-2026-843889.1 CriticalSeptember 22, 2026
fortinet fortios, fortipam, fortiproxy +1 more +3 moreA NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all...CVE-2026-843922.5 LowSeptember 8, 2026
fortinet fortios, fortiproxy, fortipam +2 more +4 moreA buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7...CVE-2026-598404.1 MediumJuly 14, 2026
fortinet fortios, fortipam, fortiproxy +1 more +3 moreAn Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...CVE-2026-235736.1 MediumJuly 14, 2026
fortinet fortios, fortipam, fortiproxy +1 more +3 moreA improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in...CVE-2026-598395.0 MediumJuly 14, 2026
fortinet fortios, fortiproxy, fortipam +1 more +3 moreAn Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')...CVE-2025-628263.1 LowJuly 14, 2026
fortinet fortios, fortiproxy, fortipam +1 more +3 moreAn Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')...CVE-2025-626753.4 LowJuly 14, 2026
fortinet fortios, fortipam, fortiproxy +1 more +3 moreA stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2...CVE-2026-598375.9 MediumJuly 14, 2026
fortinet fortios, fortipam, fortiproxy +4 more +6 moreAn Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22]...CVE-2025-61624In KEV5.4 MediumApril 14, 2026
fortinet fortios, fortipam, fortiproxy +2 more +4 moreAn insertion of sensitive information into log file vulnerability [CWE-532] in FortiOS 7.4.0...CVE-2024-475706.3 MediumDecember 9, 2025
fortinet fortios, fortipam, fortiproxy +1 more +3 moreAn Improper Privilege Management vulnerability [CWE-269] in Fortinet FortiOS 7.6.0 through 7.6.3,...CVE-2025-548211.7 LowNovember 18, 2025
fortinet fortipamA Cleartext Storage of Sensitive Information in Memory vulnerability [CWE-316] in Fortinet...CVE-2025-617133.8 LowNovember 18, 2025
fortinet fortios, fortipam, fortiproxy +1 more +3 moreAn improper check or handling of exceptional conditions vulnerability [CWE-703] in FortiOS...CVE-2024-260085.0 MediumOctober 14, 2025
fortinet fortimail, fortimanager, fortimanager cloud +9 more +11 moreA insertion of sensitive information into sent data in Fortinet FortiManager Cloud 7.4.1 through...CVE-2024-475694.2 MediumOctober 14, 2025
fortinet fortios, fortiproxy, fortipam +1 more +3 moreAn Improper Validation of Certificate with Host Mismatch vulnerability [CWE-297] in FortiProxy...CVE-2025-252536.8 MediumOctober 14, 2025
fortinet fortios, fortipam, fortiproxy +2 more +4 moreA heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4...CVE-2025-222585.7 MediumOctober 14, 2025
fortinet fortios, fortipam, fortiproxy +1 more +3 moreAn Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version...CVE-2025-577406.7 MediumOctober 14, 2025
fortinet fortipam, fortiswitchmanager +1 moreA weak authentication in Fortinet FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0 through 1.3.1, 1.2.0...CVE-2025-492017.4 HighOctober 14, 2025
fortinet fortios, fortipam, fortiproxy +1 more +3 moreAn authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet...CVE-2024-260097.9 HighAugust 12, 2025
fortinet fortios, fortipam, fortiproxy +1 more +3 moreAn Integer Overflow or Wraparound vulnerability [CWE-190] in FortiOS version 7.6.2 and below,...CVE-2025-252484.8 MediumAugust 12, 2025
fortinet fortios, fortipam, fortiproxy +2 moreA double free vulnerability [CWE-415] in Fortinet FortiOS version 7.4.0, version 7.2.0 through 7...CVE-2023-455846.3 MediumAugust 12, 2025
fortinet fortipam, fortisra +1 moreA improper handling of insufficient permissions or privileges in Fortinet FortiPAM 1.4.0 through...CVE-2025-222566.0 MediumJune 10, 2025
fortinet fortios, fortipam, fortiproxy +2 more +4 moreAn Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL-VPN version 7.6.0,...CVE-2024-50562Public exploit4.4 MediumJune 10, 2025
fortinet fortios, fortipam, fortiproxy +2 more +4 moreA use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.0...CVE-2024-453247.0 HighMarch 11, 2025
fortinet fortios, fortipam, fortiproxy +1 more +3 moreA use of externally-controlled format string vulnerability [CWE-134] in Fortinet FortiOS version...CVE-2023-407216.3 MediumFebruary 11, 2025
fortinet fortios, fortipam, fortiproxy +2 moreAn Out-of-bounds Read vulnerability [CWE-125] in FortiOS version 7.6.0, version 7.4.4 and below,...CVE-2024-466707.5 HighJanuary 14, 2025
fortinet fortios, fortipam, fortiproxy +1 more +3 moreA out-of-bounds write in Fortinet FortiOS versions 7.6.0, 7.4.0 through 7.4.6, 7.2.0 through 7.2...CVE-2024-529633.5 LowJanuary 14, 2025
fortinet fortimanager, fortios, fortipam +3 more +5 moreA missing authentication for critical function in Fortinet FortiManager version 7.4.0 through 7.4...CVE-2024-260115.2 MediumNovember 12, 2024
fortinet fortios, fortipam, fortiproxy +1 more +3 moreAn insufficient session expiration vulnerability [CWE-613] vulnerability in FortiOS 7.2.5 and...CVE-2022-458623.5 LowAugust 13, 2024
fortinet fortios, fortipam, fortiproxy +1 more +3 moreA stack-based buffer overflow in Fortinet FortiPAM version 1.2.0, 1.1.0 through 1.1.2, 1.0.0...CVE-2024-260106.7 MediumJune 11, 2024
fortinet fortios, fortipam, fortiproxy +1 more +3 moreA use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.4,...CVE-2023-366406.2 MediumMay 14, 2024
fortinet fortios, fortipam, fortiproxy +1 more +3 moreA use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.5,...CVE-2023-455836.2 MediumMay 14, 2024
fortinet fortios, fortiproxy, fortisase +1 more +3 moreA out-of-bounds write in Fortinet FortiOS 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0.0 through...CVE-2023-42789Public exploit9.3 CriticalMarch 12, 2024
fortinet fortios, fortipam, fortiproxy +2 moreA use of externally-controlled format string in Fortinet FortiOS 7.2.0 through 7.2.4, 7.0.0...CVE-2023-291818.3 HighFebruary 22, 2024
fortinet fortios, fortipam, fortiproxy +2 more +4 moreA use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7...CVE-2024-23113In KEVPublic exploitEPSS 61.7%9.8 CriticalFebruary 15, 2024
fortinet fortipamAn allocation of resources without limits or throttling vulnerability [CWE-770] in FortiPAM 1.0...CVE-2023-379344.2 MediumJanuary 10, 2024
fortinet fortios, fortipam +1 moreA double free in Fortinet FortiOS versions 7.0.0 through 7.0.5, FortiPAM version 1.0.0 through 1...CVE-2023-416788.3 HighDecember 13, 2023
fortinet fortios, fortipam, fortiproxy +2 moreA use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.4,...CVE-2023-366397.0 HighDecember 13, 2023