Latest low severity vulnerabilities for vendor "fortinet"

Fortinet FortiSandboxCredential disclosure in LDAP configuration web page.

Risk 15

Severity

2.5

First published (updated )

Advisory

FG-IR-26-113

Fortinet FortiSandboxCredential disclosure in LDAP configuration web page.

Risk 16

Severity

2.7

First published (updated )

CVE-2026-27316

Fortinet FortiAnalyzerAuthentication Lockout Bypass via Race Condition

Risk 20

Severity

3.7

First published (updated )

CVE-2026-22629

Fortinet FortiAnalyzerAuthentication Lockout Bypass via Race Condition

Risk 19

Severity

3.4

First published (updated )

Advisory

FG-IR-26-079

Fortinet FortiOSFirewall policy bypass in FSSO Terminal Services Agent

Risk 27

Severity

3.8

First published (updated )

Advisory

FG-IR-25-384

Fortinet FortiOSFortinet FortiOS through 7.6.6 allows attackers to decrypt LDAP credentials stored in device configu…

Risk 13

Severity

3.2

EPSS

0.00%

First published (updated )

CVE-2026-25815

Fortinet FortiSandboxSSRF in GUI console

Risk 26

Severity

3.8

First published (updated )

CVE-2025-67685

Fortinet FortiSandboxSSRF in GUI console

Risk 25

Severity

3.4

First published (updated )

Advisory

FG-IR-25-783

Fortinet FortiAuthenticatorAn improper access control vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAu…

Risk 16

Severity

2.7

First published (updated )

CVE-2025-59923

Fortinet FortiAuthenticatorA direct request ('forced browsing') vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.…

Risk 16

Severity

2.7

First published (updated )

CVE-2025-57823

Fortinet FortiPAMTrusted hosts bypass via SSH

Risk 11

Severity

1.8

First published (updated )

Advisory

FG-IR-25-545

Fortinet FortiOSInsertion of Sensitive 2FA Information in logs and debug command

Risk 15

Severity

2.6

First published (updated )

Advisory

FG-IR-24-452

Fortinet FortiOSMultiple Unchecked Return Value leading to Null Pointer Dereference

Risk 15

Severity

2.5

First published (updated )

Advisory

FG-IR-25-653

Fortinet FortiManagerSQL injection in forward module

Risk 16

Severity

2.7

First published (updated )

CVE-2025-24474

Fortinet FortiAnalyzerSQL injection in forward module

Risk 15

Severity

2.6

First published (updated )

Advisory

FG-IR-24-437

Fortinet FortiProxySSH key is added even if operation is aborted

Risk 16

Severity

3.2

First published (updated )

CVE-2023-29184

Fortinet FortiOSFirewall session injection in FGSP

Risk 17

Severity

3

First published (updated )

Advisory

FG-IR-24-287

Fortinet FortiProxySSH key is added even if operation is aborted

Risk 16

Severity

3.1

First published (updated )

Advisory

FG-IR-23-008

Fortinet FortiOSInformation Disclosure on SSLVPN endpoint

Risk 21

Severity

3.9

First published (updated )

Advisory

FG-IR-24-257

Fortinet FortiPortalInsufficient Access Control Over API Endpoints

Risk 21

Severity

3.9

First published (updated )

Advisory

FG-IR-24-274

Fortinet FortiPortalA insertion of sensitive information into log file in Fortinet FortiPortal versions 7.4.0, versions …

Risk 12

Severity

2.7

EPSS

0.01%

First published (updated )

CVE-2025-46777

Fortinet FortiOSBuffer over-read in FGFM

Risk 15

Severity

3.7

EPSS

0.05%

First published (updated )

CVE-2025-47295

Fortinet FortiOSBuffer over-read in FGFM

Risk 19

Severity

3.4

First published (updated )

Advisory

FG-IR-24-381

Fortinet FortiManagerUnauthorized modification of global threat feeds

Risk 13

Severity

2.1

First published (updated )

Advisory

FG-IR-24-023

Fortinet FortiOSLDAP Clear-text credentials retrievable with IP modification

Risk 13

Severity

2.1

First published (updated )

Advisory

FG-IR-24-111

Fortinet FortiClientEMSEMS can send javascript code to client through messages

Risk 15

Severity

2.6

First published (updated )

Advisory

FG-IR-23-344

Fortinet FortiSIEMIncorrect authorization in incident page

Risk 26

Severity

3.8

First published (updated )

CVE-2024-55592

Fortinet FortiSIEMIncorrect authorization in incident page

Risk 26

Severity

3.6

First published (updated )

Advisory

FG-IR-24-377

Fortinet FortiAnalyzerDisclosure of Logs of Devices not belonging to the Current ADOM from Log View

Risk 13

Severity

2.3

First published (updated )

CVE-2024-52966

Fortinet FortiManagerUse of Hard-coded Cryptographic Key to encrypt sensitive data

Risk 20

Severity

3.9

First published (updated )

Advisory

FG-IR-24-094

Trending

Vendor Risk Score

Software

Fortinet FortiSandboxCredential disclosure in LDAP configuration web page.

Fortinet FortiSandboxCredential disclosure in LDAP configuration web page.

Fortinet FortiAnalyzerAuthentication Lockout Bypass via Race Condition

Fortinet FortiAnalyzerAuthentication Lockout Bypass via Race Condition

Fortinet FortiOSFirewall policy bypass in FSSO Terminal Services Agent

Don't miss critical vulnerabilities

Fortinet FortiOSFortinet FortiOS through 7.6.6 allows attackers to decrypt LDAP credentials stored in device configu…

Fortinet FortiSandboxSSRF in GUI console

Fortinet FortiSandboxSSRF in GUI console

Fortinet FortiAuthenticatorAn improper access control vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAu…

Fortinet FortiAuthenticatorA direct request ('forced browsing') vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.…

Don't miss critical vulnerabilities

Fortinet FortiPAMTrusted hosts bypass via SSH

Fortinet FortiOSInsertion of Sensitive 2FA Information in logs and debug command

Fortinet FortiOSMultiple Unchecked Return Value leading to Null Pointer Dereference

Fortinet FortiManagerSQL injection in forward module

Fortinet FortiAnalyzerSQL injection in forward module

Don't miss critical vulnerabilities

Fortinet FortiProxySSH key is added even if operation is aborted

Fortinet FortiOSFirewall session injection in FGSP

Fortinet FortiProxySSH key is added even if operation is aborted

Fortinet FortiOSInformation Disclosure on SSLVPN endpoint

Fortinet FortiPortalInsufficient Access Control Over API Endpoints

Don't miss critical vulnerabilities

Fortinet FortiPortalA insertion of sensitive information into log file in Fortinet FortiPortal versions 7.4.0, versions …

Fortinet FortiOSBuffer over-read in FGFM

Fortinet FortiOSBuffer over-read in FGFM

Fortinet FortiManagerUnauthorized modification of global threat feeds

Fortinet FortiOSLDAP Clear-text credentials retrievable with IP modification

Don't miss critical vulnerabilities

Fortinet FortiClientEMSEMS can send javascript code to client through messages

Fortinet FortiSIEMIncorrect authorization in incident page

Fortinet FortiSIEMIncorrect authorization in incident page

Fortinet FortiAnalyzerDisclosure of Logs of Devices not belonging to the Current ADOM from Log View

Fortinet FortiManagerUse of Hard-coded Cryptographic Key to encrypt sensitive data

Don't miss critical vulnerabilities

Company

Resources

Contact