Read the docs

Fortinet

Records1171All Threatist records
Exploited (KEV)32In CISA KEV
CVSS critical136CVSS 9.0–10.0
CVSS high431CVSS 7.0–8.9

Exploited now

Fortinet records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

12 records in Fortirecorder · all components

Priority CRITICAL 100KEV

A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1 all versions, FortiMail 7.6.0 through 7.6.2, FortiMail 7.4.0…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.30944 Published 2025-05-13 No fix listed CWE-121
TI-2024-32582 CVE-2024-48884 · GHSA-qhwf-jg9m-cq9f

Path traversal in Fortinet FortiOS

Priority MEDIUM 61

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3, FortiManager Cloud 7.4.1 through 7.4.3, Forti…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.15212 Published 2025-01-14 No fix listed CWE-22
TI-2024-32583 CVE-2024-48885 · GHSA-9wj2-ccpq-qx84

Path traversal in Fortinet FortiVoice

Priority MEDIUM 41

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiRecorder 7.2.0 through 7.2.1, FortiRecorder 7.0.0 through 7.0.4, FortiVoice 7.0.0 through 7.0.4, FortiVoice…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00825 Published 2025-01-16 No fix listed CWE-22
Priority LOW 39

A cross-site request forgery (CSRF) in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x, FortiSwitch version 7.0.0 through 7.0.4, 6.4.0 through 6.4.10, 6.2.0 through 6.2.7, 6.0.x, FortiMail version 7.0.0 through 7.0.3,…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00491 Published 2023-12-13 No fix listed CWE-352
TI-2024-37393 CVE-2024-56497 · GHSA-8qhx-f4vg-5h4h

OS command injection in Fortinet FortiMail

Priority LOW 32

An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiMail versions 7.2.0 through 7.2.4 and 7.0.0 through 7.0.6 and 6.4.0 through 6.4.7, FortiRecorder versions 7.0…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00585 Published 2025-01-14 No fix listed CWE-78
TI-2021-06325 CVE-2021-24008 · GHSA-f254-h25h-9hpx

Information disclosure in Fortinet FortiDDoS

Priority LOW 29

An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiDDoS version 5.4.0, version 5.3.2 and below, version 5.2.0, version 5.1.0, version 5.0.0, version 4.7.0, versi…

CVSS 3.1MEDIUM 5.0 Network No auth No interaction EPSS 0.00503 Published 2025-03-28 No fix listed CWE-200
TI-2024-31852 CVE-2024-47566 · GHSA-m343-65m6-2r6j

Path traversal in Fortinet FortiRecorder

Priority LOW 26

A improper limitation of a pathname to a restricted directory ('path traversal') [CWE-23] in Fortinet FortiRecorder version 7.2.0 through 7.2.1 and before 7.0.4 allows a privileged attacker to delete files from the under…

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00198 Published 2025-01-14 No fix listed CWE-22
TI-2024-31090 CVE-2024-46664 · GHSA-xx9m-2fc7-mhx8

Path traversal in Fortinet FortiRecorder

Priority LOW 24

A relative path traversal in Fortinet FortiRecorder [CWE-23] version 7.2.0 through 7.2.1 and before 7.0.4 allows a privileged attacker to read files from the underlying filesystem via crafted HTTP or HTTPs requests.

CVSS 3.1MEDIUM 5.2 Network High privileges No interaction EPSS 0.00538 Published 2025-01-14 No fix listed CWE-23
Priority LOW 20

A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, FortiMail 7.0 all versions, FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1…

CVSS 3.1MEDIUM 4.2 Network Low privileges No interaction EPSS 0.00484 Published 2025-10-14 No fix listed CWE-201
TI-2024-27014 CVE-2024-40588 · GHSA-hxwc-32r9-7287

Path traversal in Fortinet FortiCamera

Priority LOW 19

Multiple relative path traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiCamera 2.1 all versions, FortiCamera 2.0.0, FortiCamera 1.1 all versions, FortiCamera 1.0 all versions, FortiMail 7.6.0 through 7.6…

CVSS 3.1MEDIUM 4.2 Local High privileges No interaction EPSS 0.00184 Published 2025-08-12 No fix listed CWE-23
Priority LOW 17

A cleartext storage of sensitive information vulnerability [CWE-312] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.2, FortiMail 7.4.0 through 7.4.4, FortiMail 7.2.0 through 7.2.7, FortiMail 7.0.0 through 7.0.8, F…

CVSS 3.1MEDIUM 4.0 Local High privileges User interaction EPSS 0.00097 Published 2026-03-10 No fix listed CWE-312
Open these records in search →