Skip to contentFortinet Fortiportal vulnerabilities
- fortinet fortiportalA improper access control vulnerability in Fortinet FortiPortal 7.4.0 through 7.4.7, FortiPortal...CVE-2026-499386.2 Medium
- fortinet fortianalyzer, fortimanager, fortios +1 more +3 moreA key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2,...CVE-2024-405935.9 Medium
- fortinet fortiportalAn Incorrect Authorization vulnerability [CWE-863] in FortiPortal 7.4.0 through 7.4.5 may allow...CVE-2025-548386.4 Medium
- fortinet fortiportalA authorization bypass through user-controlled key in Fortinet FortiPortal versions 7.4.0,...CVE-2024-453293.9 Low
- fortinet fortiportalA insertion of sensitive information into log file in Fortinet FortiPortal versions 7.4.0,...CVE-2025-467772.2 Low
- fortinet fortiportalAn improper certificate validation vulnerability [CWE-295] in FortiPortal version 7.4.0, version...CVE-2024-405904.4 Medium
- fortinet fortiportalAn Improper Resolution of Path Equivalence vulnerability [CWE-41] in FortiPortal 7.4.0 through 7...CVE-2025-244708.1 High
- fortinet fortimanager, fortiadc, fortianalyzer +15 more +17 moreA externally controlled reference to a resource in another sphere in Fortinet FortiManager before...CVE-2022-234394.1 Medium
- fortinet fortiportalA improper neutralization of special elements used in an sql command ('sql injection') in...CVE-2024-352784.1 Medium
- fortinet fortiportalAn improper neutralization of script-related html tags in a web page (basic xss) in Fortinet...CVE-2024-529673.3 Low
- fortinet fortianalyzer, fortimanager, fortiportal +2 moreA use after free in Fortinet FortiManager, FortiAnalyzer allows attacker to execute unauthorized...CVE-2021-325897.7 High
- fortinet fortimanager, fortios, fortipam +3 more +5 moreA missing authentication for critical function in Fortinet FortiManager version 7.4.0 through 7.4...CVE-2024-260115.2 Medium
- fortinet fortiportalAn authorization bypass through user-controlled key vulnerability [CWE-639] in Fortinet...CVE-2023-475435.1 Medium
- fortinet fortiportalAn authorization bypass through user-controlled key in Fortinet FortiPortal version 7.2.0, and...CVE-2024-217593.9 Low
- fortinet fortiportalA improper neutralization of special elements used in an sql command ('sql injection') in...CVE-2024-314953.9 Low
- fortinet fortiportalA client-side enforcement of server-side security in Fortinet FortiPortal version 6.0.0 through 6...CVE-2023-487894.1 Medium
- fortinet fortiportalA Use Of Less Trusted Source [CWE-348] vulnerability in Fortinet FortiPortal version 7.0.0...CVE-2024-231057.1 High
- fortinet fortiportalAn improper authorization vulnerability [CWE-285] in FortiPortal version 7.2.0, and versions 7.0...CVE-2024-217613.9 Low
- fortinet fortimanager, fortianalyzer, fortianalyzer-bigdata +2 more +4 moreA use of externally-controlled format string vulnerability [CWE-134] in Fortinet FortiManager...CVE-2023-418426.3 Medium
- fortinet fortiportalAn Authorization Bypass Through User-Controlled Key vulnerability [CWE-639] affecting PortiPortal...CVE-2023-48783EPSS 22.2%4.9 Medium
- fortinet fortiportalA improper access control in Fortinet FortiPortal version 7.0.0 through 7.0.6, Fortinet...CVE-2023-467126.3 Medium
- fortinet fortiportalAn improper neutralization of special elements used in a command ('Command Injection')...CVE-2023-487917.9 High
- fortinet fortianalyzer, fortimanager, fortiportal +1 more +3 moreA exposure of sensitive information to an unauthorized actor in Fortinet FortiManager version 6.0...CVE-2022-274905.1 Medium
- fortinet fortiportalAn insertion of sensitive information into log file vulnerability [CWE-532] in the FortiPortal...CVE-2022-439544.1 Medium
- fortinet fortiportalAn improper neutralization of input during web page generation vulnerability [CWE-79] in...CVE-2022-413366.6 Medium
- fortinet fortianalyzer, fortimanager, fortiportal +1 more +3 moreMultiple OS command injection (CWE-78) vulnerabilities in the command line interface of FortiManager 6.2.7 and below, 6.4.5 and below and all versions of 6.2.x, 6.0.x and 5.6.x, FortiAnalyzer 6.2.7 an…CVE-2021-261047.8 High
- fortinet fortiportalThe use of a cryptographically weak pseudo-random number generator in the password reset feature...CVE-2021-361718.1 High
- fortinet fortios, fortiadc, fortianalyzer +13 more +15 moreA buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0...CVE-2021-427576.3 Medium
- fortinet fortiportalA memory allocation with excessive size value vulnerability in the license verification function...CVE-2021-361744.3 Medium
- fortinet fortiportalMultiple uncontrolled resource consumption vulnerabilities in the web interface of FortiPortal...CVE-2021-361766.1 Medium
- fortinet fortiportalMultiple uncontrolled resource consumption vulnerabilities in the web interface of FortiPortal...CVE-2021-325956.5 Medium
- fortinet fortiportalAn improper restriction of XML external entity reference vulnerability in the parser of XML...CVE-2021-361724.3 Medium
- fortinet fortiportalA concurrent execution using shared resource with improper Synchronization vulnerability ('Race...CVE-2021-361813.1 Low
- fortinet fortiportalAn improper neutralization of input during web page generation vulnerability (CWE-79) in...CVE-2021-326025.8 Medium
- fortinet fortiportalA use of hard-coded credentials (CWE-798) vulnerability in FortiPortal versions 5.2.5 and below,...CVE-2021-325889.8 Critical
- fortinet fortiportalA use of one-way hash with a predictable salt vulnerability in the password storing mechanism of...CVE-2021-325966.0 Medium
- fortinet fortiportalA Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Fortinet...CVE-2021-361686.5 Medium
- fortinet fortiportalMultiple improper neutralization of special elements used in an SQL command vulnerabilities in...CVE-2021-325909.9 Critical
- fortinet fortiportalAn unrestricted file upload vulnerability in the web interface of FortiPortal 6.0.0 through 6.0.4...CVE-2021-325945.4 Medium
- fortinet fortiportal, fortinet, inc. fortinet fortiportal +1 moreA weak password recovery process vulnerability in Fortinet FortiPortal versions 4.0.0 and below...CVE-2017-73429.8 Critical
- fortinet fortiportalA Cross-Site Scripting vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an...CVE-2017-73406.1 Medium
- fortinet fortiportal, fortinet, inc. fortinet fortiportal +1 moreA weak password recovery vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows...CVE-2017-77317.5 High
- fortinet fortiportal, fortinet, inc. fortinet fortiportal +1 moreAn open redirect vulnerability in Fortinet FortiPortal 4.0.0 and below allows attacker to execute...CVE-2017-73436.1 Medium
- fortinet fortiportal, fortinet, inc. fortinet fortiportal +1 moreA Cross-Site Scripting vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an...CVE-2017-73396.1 Medium
- fortinet fortiportal, fortinet, inc. fortinet fortiportal +1 moreA password management vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an...CVE-2017-73387.5 High
- fortinet fortiportal, fortinet, inc. fortinet fortiportal +1 moreAn improper Access Control vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows...CVE-2017-73379.1 Critical