Skip to contentFortinet Fortisoar vulnerabilities
- fortinet fortisoar on-premise, fortisoar paas +1 moreA improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.6, FortiSOAR...CVE-2026-843854.9 Medium
- fortinet fortisoar, fortisoar on-premise, fortisoar paas +2 moreAn improper limitation of a pathname to a restricted directory ('path traversal') vulnerability...CVE-2026-225736.2 Medium
- fortinet fortisoar, fortisoar on-premise, fortisoar paas +2 moreA improper authentication vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR...CVE-2026-237086.7 Medium
- fortinet fortisoar, fortisoar on-premise, fortisoar paas +2 moreA server-side request forgery (ssrf) vulnerability [CWE-918] vulnerability in Fortinet FortiSOAR...CVE-2025-598094.1 Medium
- fortinet fortisoar, fortisoar on-premise, fortisoar paas +2 moreA cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0...CVE-2026-221556.2 Medium
- fortinet fortisoar, fortisoar on-premise, fortisoar paas +2 moreA cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0...CVE-2026-217425.4 Medium
- fortinet fortisoar, fortisoar on-premise, fortisoar paas +2 moreA storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0...CVE-2026-225744.1 Medium
- fortinet fortisoar, fortisoar on-premise, fortisoar paas +2 moreAn improper neutralization of input during web page generation ('cross-site scripting')...CVE-2026-221544.4 Medium
- fortinet fortisoar, fortisoar on-premise, fortisoar paas +2 moreA storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0...CVE-2026-225764.1 Medium
- fortinet fortisoar agent communication bridgeAn Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability ...CVE-2025-546595.5 Medium
- fortinet fortisoar, fortisoar on-premise, fortisoar paas +2 moreAn improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.2,...CVE-2025-598106.2 Medium
- fortinet fortisoar, fortisoar on-premise, fortisoar paas +2 moreAn unverified password change vulnerability [CWE-620] vulnerability in Fortinet FortiSOAR PaaS 7...CVE-2025-598086.5 Medium
- fortinet fortisoar, fortisoar on-premise +1 moreAn Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')...CVE-2024-488916.6 Medium
- fortinet fortisoarA relative path traversal vulnerability [CWE-23] in FortiSOAR 7.6.0, 7.5.0 through 7.5.1, 7.4 all...CVE-2024-488926.4 Medium
- fortinet fortisoarAn Improper neutralization of input during web page generation ('cross-site scripting')...CVE-2025-329326.2 Medium
- fortinet fortisoarAn improper control of generation of code ('Code Injection') vulnerability [CWE-94] in FortiSOAR...CVE-2024-217607.7 High
- fortinet fortimanager, fortiadc, fortianalyzer +15 more +17 moreA externally controlled reference to a resource in another sphere in Fortinet FortiManager before...CVE-2022-234394.1 Medium
- fortinet fortisoarAn improper neutralization of formula elements in a csv file in Fortinet FortiSOAR 7.2.1 through...CVE-2024-475728.3 High
- fortinet fortisoar, fortisoar imap connector +1 moreAn improper neutralization of special elements used in an OS command ('OS Command Injection')...CVE-2024-488906.3 Medium
- fortinet forticlientems, fortisoar +1 moreAn observable response discrepancy vulnerability [CWE-204] in FortiClientEMS 7.4.0, 7.2.0 through...CVE-2024-365104.9 Medium
- fortinet fortisoarAn improper neutralization of input during web page generation vulnerability [CWE-79] in...CVE-2024-488936.4 Medium
- fortinet fortisoarAn improper authorization vulnerability [CWE-285] in FortiSOAR version 7.4.0 through 7.4.3, 7.3.0...CVE-2024-453277.1 High
- fortinet fortisoarAn improper neutralization of input during web page generation ('cross-site scripting') in...CVE-2023-262116.4 Medium
- fortinet fortisoarMultiple improper neutralization of special elements used in SQL commands ('SQL Injection')...CVE-2023-237755.9 Medium
- fortinet fortisoarAn improper removal of sensitive information before storage or transfer vulnerability [CWE-212]...CVE-2024-314936.0 Medium
- fortinet fortisoarA improper neutralization of special elements used in a template engine vulnerability in Fortinet...CVE-2023-279957.2 High
- fortinet fortisoarA improper access control vulnerability in Fortinet FortiSOAR 7.3.0 - 7.3.1 allows an attacker...CVE-2023-256057.5 High
- fortinet fortisoarImproper neutralization of input during web page generation [CWE-79] in FortiSOAR 7.0.0 through 7...CVE-2022-383793.4 Low
- fortinet fortisoarA missing authentication for a critical function vulnerability in Fortinet FortiSOAR 6.4.0 - 6.4...CVE-2022-424735.3 Medium
- fortinet fortisoarAn improper neutralization of special elements used in an OS command ('OS Command Injection')...CVE-2022-290617.2 High
- fortinet fortisoarAn improper neutralization of special elements used in a template engine vulnerability [CWE-1336]...CVE-2022-358476.3 Medium
- fortinet fortisoarAn improper privilege management vulnerability [CWE-269] in Fortinet FortiSOAR before 7.2.1...CVE-2022-302987.0 High
- fortinet fortisoarMultiple relative path traversal vulnerabilities [CWE-23] in Fortinet FortiSOAR before 7.2.1...CVE-2022-290626.3 Medium
- fortinet fortisoarAn improper access control in Fortinet FortiSOAR before 7.2.0 allows unauthenticated attackers to...CVE-2022-234437.5 High