# Fortinet FortiManager. Every CVE that names Fortinet FortiManager among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [SQL injection in Fortinet FortiManager Cloud and others](https://agentprime.io/advisories/CVE-2026-23707.md) `CVE-2026-23707` · CVE record: Fortinet FortiManager Cloud and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: SQL injection - [SQL injection in Fortinet FortiAnalyzer Cloud and others](https://agentprime.io/advisories/CVE-2026-23706.md) `CVE-2026-23706` · CVE record: Fortinet FortiAnalyzer Cloud and 2 more · CVSS 5.9 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: SQL injection - [SQL injection in Fortinet FortiAnalyzer and others](https://agentprime.io/advisories/CVE-2026-23705.md) `CVE-2026-23705` · CVE record: Fortinet FortiAnalyzer and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: SQL injection - [OS command injection in Fortinet FortiManager and others](https://agentprime.io/advisories/CVE-2026-106171.md) `CVE-2026-106171` · CVE record: Fortinet FortiManager and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Command injection - [Improper access control in Fortinet FortiManager and others](https://agentprime.io/advisories/CVE-2026-22575.md) `CVE-2026-22575` · CVE record: Fortinet FortiManager and 1 more · CVSS 4.7 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Broken access control - [Authentication bypass in Fortinet FortiManager and others](https://agentprime.io/advisories/CVE-2026-70468.md) `CVE-2026-70468` · CVE record: Fortinet FortiManager and 1 more · CVSS 7.3 High · Not analysed yet · Published 12 Aug 2026 · Tags: Authentication bypass - [Fortinet FortiAnalyzer: A use of potentially dangerous function vulnerability in Fortinet FortiAnalyzer 7.6.0…](https://agentprime.io/advisories/CVE-2025-67604.md) `CVE-2025-67604` · CVE record: Fortinet FortiAnalyzer and 1 more · CVSS 5.2 Medium · Not analysed yet · Published 12 May 2026 · Tags: CWE-676 - [Path traversal in Fortinet FortiManager Cloud and others](https://agentprime.io/advisories/CVE-2025-68649.md) `CVE-2025-68649` · CVE record: Fortinet FortiManager Cloud and 3 more · CVSS 5.4 Medium · Not analysed yet · Published 14 Apr 2026 · Tags: Path traversal - [SQL injection in Fortinet FortiManager and others](https://agentprime.io/advisories/CVE-2025-61848.md) `CVE-2025-61848` · CVE record: Fortinet FortiManager and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Apr 2026 · Tags: SQL injection - [Unlimited authentication attempts in Fortinet FortiAnalyzer and others](https://agentprime.io/advisories/CVE-2026-22629.md) `CVE-2026-22629` · CVE record: Fortinet FortiAnalyzer and 3 more · CVSS 3.4 Low · Not analysed yet · Published 10 Mar 2026 · Tags: Authentication bypass - [Improper certificate validation in Fortinet FortiAnalyzer and others](https://agentprime.io/advisories/CVE-2025-68482.md) `CVE-2025-68482` · CVE record: Fortinet FortiAnalyzer and 3 more · CVSS 6.3 Medium · Not analysed yet · Published 10 Mar 2026 · Tags: Weak cryptography or TLS - [Fortinet FortiAnalyzer: A hidden functionality vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3…](https://agentprime.io/advisories/CVE-2025-48418.md) `CVE-2025-48418` · CVE record: Fortinet FortiAnalyzer and 3 more · CVSS 6.4 Medium · Not analysed yet · Published 10 Mar 2026 · Tags: CWE-912 - [Authentication bypass in Fortinet FortiManager and others](https://agentprime.io/advisories/CVE-2026-22572.md) `CVE-2026-22572` · CVE record: Fortinet FortiManager and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 10 Mar 2026 · Tags: Authentication bypass - [Uncontrolled format string in Fortinet FortiManager Cloud and others](https://agentprime.io/advisories/CVE-2025-68648.md) `CVE-2025-68648` · CVE record: Fortinet FortiManager Cloud and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption - [Stack-based buffer overflow in Fortinet FortiManager](https://agentprime.io/advisories/CVE-2025-54820.md) `CVE-2025-54820` · CVE record: Fortinet FortiManager · CVSS 7.0 High · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption - [Authentication bypass in Fortinet FortiWeb and others](https://agentprime.io/advisories/CVE-2026-24858.md) `CVE-2026-24858` · CVE record: Fortinet FortiWeb and 4 more · CVSS 9.4 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.87 · Not analysed yet · Published 27 Jan 2026 · Tags: Authentication bypass - [Fortinet FortiAnalyzer: A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2…](https://agentprime.io/advisories/CVE-2024-40593.md) `CVE-2024-40593` · CVE record: Fortinet FortiAnalyzer and 3 more · CVSS 5.9 Medium · Not analysed yet · Published 11 Dec 2025 · Tags: CWE-320 - [Information disclosure in Fortinet FortiManager and others](https://agentprime.io/advisories/CVE-2024-47569.md) `CVE-2024-47569` · CVE record: Fortinet FortiManager and 4 more · CVSS 4.2 Medium · Not analysed yet · Published 14 Oct 2025 · Tags: Information disclosure - [Heap-based buffer overflow in Fortinet FortiManager and others](https://agentprime.io/advisories/CVE-2024-50571.md) `CVE-2024-50571` · CVE record: Fortinet FortiManager and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2025 · Tags: Memory corruption - [Path traversal in Fortinet FortiManager](https://agentprime.io/advisories/CVE-2024-52964.md) `CVE-2024-52964` · CVE record: Fortinet FortiManager · CVSS 5.2 Medium · Not analysed yet · Published 12 Aug 2025 · Tags: Path traversal - [SQL injection in Fortinet FortiManager and others](https://agentprime.io/advisories/CVE-2025-24474.md) `CVE-2025-24474` · CVE record: Fortinet FortiManager and 1 more · CVSS 2.6 Low · Not analysed yet · Published 8 Jul 2025 · Tags: SQL injection - [Missing authorization in Fortinet FortiManager](https://agentprime.io/advisories/CVE-2024-54020.md) `CVE-2024-54020` · CVE record: Fortinet FortiManager · CVSS 2.1 Low · Not analysed yet · Published 28 May 2025 · Tags: Broken access control - [Fortinet FortiProxy: A improper restriction of communication channel to intended endpoints vulnerability…](https://agentprime.io/advisories/CVE-2024-26013.md) `CVE-2024-26013` · CVE record: Fortinet FortiProxy and 2 more · CVSS 7.1 High · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-923 - [Log injection in Fortinet FortiAnalyzer and others](https://agentprime.io/advisories/CVE-2024-52962.md) `CVE-2024-52962` · CVE record: Fortinet FortiAnalyzer and 1 more · CVSS 5.0 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: Other injection - [A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0 through 6.4.11 and v…](https://agentprime.io/advisories/CVE-2023-25610.md) `CVE-2023-25610` · CVE record: Fortinet FortiSwitchManager and 4 more · CVSS 9.3 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.18 · Not analysed yet · Published 24 Mar 2025 · Tags: Memory corruption - [Sensitive information in log files in Fortinet FortiAnalyzer and others](https://agentprime.io/advisories/CVE-2024-40585.md) `CVE-2024-40585` · CVE record: Fortinet FortiAnalyzer and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 14 Mar 2025 · Tags: Information disclosure - [Command injection in Fortinet FortiManager](https://agentprime.io/advisories/CVE-2024-46662.md) `CVE-2024-46662` · CVE record: Fortinet FortiManager · CVSS 8.3 High · Not analysed yet · Published 14 Mar 2025 · Tags: Command injection - [SQL injection in Fortinet FortiManager](https://agentprime.io/advisories/CVE-2024-33501.md) `CVE-2024-33501` · CVE record: Fortinet FortiManager · CVSS 4.0 Medium · Not analysed yet · Published 11 Mar 2025 · Tags: SQL injection - [OS command injection in Fortinet FortiManager and others](https://agentprime.io/advisories/CVE-2024-32123.md) `CVE-2024-32123` · CVE record: Fortinet FortiManager and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 11 Mar 2025 · Tags: Command injection - [OS command injection in Fortinet FortiAnalyzer and others](https://agentprime.io/advisories/CVE-2024-40584.md) `CVE-2024-40584` · CVE record: Fortinet FortiAnalyzer and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 11 Feb 2025 · Tags: Command injection - [Path traversal in Fortinet FortiManager and others](https://agentprime.io/advisories/CVE-2024-36508.md) `CVE-2024-36508` · CVE record: Fortinet FortiManager and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 11 Feb 2025 · Tags: Path traversal - [Hard-coded cryptographic key in Fortinet FortiManager](https://agentprime.io/advisories/CVE-2024-33504.md) `CVE-2024-33504` · CVE record: Fortinet FortiManager · CVSS 3.9 Low · Not analysed yet · Published 11 Feb 2025 · Tags: Hard-coded credentials - [A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests, where the \`Host\` header points to an arbitr…](https://agentprime.io/advisories/CVE-2022-23439.md) `CVE-2022-23439` · CVE record: Fortinet FortiTester and 4 more · CVSS 4.1 Medium · Not analysed yet · Published 22 Jan 2025 · Tags: CWE-610 - [Weak authentication in Fortinet FortiAnalyzer and others](https://agentprime.io/advisories/CVE-2024-50563.md) `CVE-2024-50563` · CVE record: Fortinet FortiAnalyzer and 1 more · CVSS 6.7 Medium · Not analysed yet · Published 16 Jan 2025 · Tags: Authentication bypass - [Fortinet FortiAnalyzer Cloud: A incorrect privilege assignment vulnerability in Fortinet FortiAnalyzer 7.4.0 through…](https://agentprime.io/advisories/CVE-2024-45331.md) `CVE-2024-45331` · CVE record: Fortinet FortiAnalyzer Cloud and 2 more · CVSS 6.9 Medium · Not analysed yet · Published 16 Jan 2025 · Tags: Privilege escalation - [Path traversal in Fortinet FortiManager](https://agentprime.io/advisories/CVE-2024-32115.md) `CVE-2024-32115` · CVE record: Fortinet FortiManager · CVSS 5.2 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Path traversal - [Fortinet FortiManager: An operation on a resource after expiration or release in Fortinet FortiManager 6.4.12…](https://agentprime.io/advisories/CVE-2024-47571.md) `CVE-2024-47571` · CVE record: Fortinet FortiManager · CVSS 7.9 High · Not analysed yet · Published 14 Jan 2025 · Tags: CWE-672 - [Missing authentication in Fortinet FortiManager](https://agentprime.io/advisories/CVE-2024-35277.md) `CVE-2024-35277` · CVE record: Fortinet FortiManager · CVSS 8.4 High · Not analysed yet · Published 14 Jan 2025 · Tags: Authentication bypass - [Path traversal in Fortinet FortiManager and others](https://agentprime.io/advisories/CVE-2024-33502.md) `CVE-2024-33502` · CVE record: Fortinet FortiManager and 1 more · CVSS 6.4 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Path traversal - [Fortinet FortiManager Cloud: A improper privilege management vulnerability in Fortinet FortiManager Cloud 7.4.1…](https://agentprime.io/advisories/CVE-2024-33503.md) `CVE-2024-33503` · CVE record: Fortinet FortiManager Cloud and 1 more · CVSS 6.7 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Privilege escalation - [Path traversal in Fortinet FortiOS and others](https://agentprime.io/advisories/CVE-2024-48884.md) `CVE-2024-48884` · CVE record: Fortinet FortiOS and 3 more · CVSS 6.7 Medium · EPSS 0.15 · Not analysed yet · Published 14 Jan 2025 · Tags: Path traversal - [Out-of-bounds write in Fortinet FortiAnalyzer and others](https://agentprime.io/advisories/CVE-2024-35273.md) `CVE-2024-35273` · CVE record: Fortinet FortiAnalyzer and 1 more · CVSS 7.0 High · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption - [Stack-based buffer overflow in Fortinet FortiAnalyzer and others](https://agentprime.io/advisories/CVE-2024-35276.md) `CVE-2024-35276` · CVE record: Fortinet FortiAnalyzer and 3 more · CVSS 5.0 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption - [SQL injection in Fortinet FortiManager and others](https://agentprime.io/advisories/CVE-2024-35275.md) `CVE-2024-35275` · CVE record: Fortinet FortiManager and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: SQL injection - [Path traversal in Fortinet FortiManager and others](https://agentprime.io/advisories/CVE-2024-36512.md) `CVE-2024-36512` · CVE record: Fortinet FortiManager and 1 more · CVSS 7.0 High · Not analysed yet · Published 14 Jan 2025 · Tags: Path traversal - [OS command injection in Fortinet FortiManager and others](https://agentprime.io/advisories/CVE-2024-50566.md) `CVE-2024-50566` · CVE record: Fortinet FortiManager and 1 more · CVSS 7.2 High · Not analysed yet · Published 14 Jan 2025 · Tags: Command injection - [Use after free in Fortinet FortiManager and others](https://agentprime.io/advisories/CVE-2021-32589.md) `CVE-2021-32589` · CVE record: Fortinet FortiManager and 1 more · CVSS 7.7 High · Not analysed yet · Published 19 Dec 2024 · Tags: Memory corruption - [OS command injection in Fortinet FortiManager](https://agentprime.io/advisories/CVE-2024-48889.md) `CVE-2024-48889` · CVE record: Fortinet FortiManager · CVSS 7.2 High · Not analysed yet · Published 18 Dec 2024 · Tags: Command injection - [Stack-based buffer overflow in Fortinet FortiManager and others](https://agentprime.io/advisories/CVE-2024-31496.md) `CVE-2024-31496` · CVE record: Fortinet FortiManager and 1 more · CVSS 6.3 Medium · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption - [Heap-based buffer overflow in Fortinet FortiAnalyzer and others](https://agentprime.io/advisories/CVE-2024-33505.md) `CVE-2024-33505` · CVE record: Fortinet FortiAnalyzer and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption - [Missing authentication in Fortinet FortiManager and others](https://agentprime.io/advisories/CVE-2024-26011.md) `CVE-2024-26011` · CVE record: Fortinet FortiManager and 4 more · CVSS 5.2 Medium · Not analysed yet · Published 12 Nov 2024 · Tags: Authentication bypass - [Path traversal in Fortinet FortiAnalyzer and others](https://agentprime.io/advisories/CVE-2024-35274.md) `CVE-2024-35274` · CVE record: Fortinet FortiAnalyzer and 1 more · CVSS 2.2 Low · Not analysed yet · Published 12 Nov 2024 · Tags: Path traversal - [OS command injection in Fortinet FortiAnalyzer and others](https://agentprime.io/advisories/CVE-2024-32118.md) `CVE-2024-32118` · CVE record: Fortinet FortiAnalyzer and 1 more · CVSS 6.3 Medium · Not analysed yet · Published 12 Nov 2024 · Tags: Command injection - [Path traversal in Fortinet FortiAnalyzer and others](https://agentprime.io/advisories/CVE-2024-32116.md) `CVE-2024-32116` · CVE record: Fortinet FortiAnalyzer and 1 more · CVSS 4.8 Medium · Not analysed yet · Published 12 Nov 2024 · Tags: Path traversal - [Exposure of personal information in Fortinet FortiManager and others](https://agentprime.io/advisories/CVE-2023-44255.md) `CVE-2023-44255` · CVE record: Fortinet FortiManager and 1 more · CVSS 3.9 Low · Not analysed yet · Published 12 Nov 2024 · Tags: Information disclosure - [Path traversal in Fortinet FortiManager and others](https://agentprime.io/advisories/CVE-2024-32117.md) `CVE-2024-32117` · CVE record: Fortinet FortiManager and 1 more · CVSS 4.7 Medium · Not analysed yet · Published 12 Nov 2024 · Tags: Path traversal - [Fortinet FortiManager: A client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigData at…](https://agentprime.io/advisories/CVE-2024-23666.md) `CVE-2024-23666` · CVE record: Fortinet FortiManager and 1 more · CVSS 7.1 High · Not analysed yet · Published 12 Nov 2024 · Tags: CWE-602 - [Missing authentication in Fortinet FortiManager](https://agentprime.io/advisories/CVE-2024-47575.md) `CVE-2024-47575` · CVE record: Fortinet FortiManager · CVSS 9.8 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.95 · Not analysed yet · Published 23 Oct 2024 · Tags: Authentication bypass - [Information disclosure in Fortinet FortiManager](https://agentprime.io/advisories/CVE-2024-33506.md) `CVE-2024-33506` · CVE record: Fortinet FortiManager · CVSS 3.1 Low · Not analysed yet · Published 8 Oct 2024 · Tags: Information disclosure - [Insecure direct object reference in Fortinet FortiAnalyzer and others](https://agentprime.io/advisories/CVE-2023-44254.md) `CVE-2023-44254` · CVE record: Fortinet FortiAnalyzer and 1 more · CVSS 4.7 Medium · Not analysed yet · Published 10 Sept 2024 · Tags: Broken access control Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .