agentprime: fortinet-fortiportalEvery new CVE for fortinet-fortiportal.https://agentprime.io/CVE-2026-49938: Improper access control in Fortinet FortiPortalhttps://agentprime.io/advisories/CVE-2026-49938/https://agentprime.io/advisories/CVE-2026-49938/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jun 2026 14:27:42 GMTCVECVE-2024-40593: Fortinet FortiAnalyzer: A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2…https://agentprime.io/advisories/CVE-2024-40593/https://agentprime.io/advisories/CVE-2024-40593/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 11 Dec 2025 14:10:08 GMTCVECVE-2025-54838: Incorrect authorization in Fortinet FortiPortalhttps://agentprime.io/advisories/CVE-2025-54838/https://agentprime.io/advisories/CVE-2025-54838/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Dec 2025 17:18:48 GMTCVECVE-2024-45329: Insecure direct object reference in Fortinet FortiPortalhttps://agentprime.io/advisories/CVE-2024-45329/https://agentprime.io/advisories/CVE-2024-45329/CVSS 3.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Jun 2025 16:36:06 GMTCVECVE-2025-46777: Sensitive information in log files in Fortinet FortiPortalhttps://agentprime.io/advisories/CVE-2025-46777/https://agentprime.io/advisories/CVE-2025-46777/CVSS 2.2 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 May 2025 07:56:03 GMTCVECVE-2024-40590: Improper certificate validation in Fortinet FortiPortalhttps://agentprime.io/advisories/CVE-2024-40590/https://agentprime.io/advisories/CVE-2024-40590/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 14 Mar 2025 15:02:47 GMTCVECVE-2025-24470: Fortinet FortiPortal: An Improper Resolution of Path Equivalence vulnerability [CWE-41] in FortiPortal 7.4.0…https://agentprime.io/advisories/CVE-2025-24470/https://agentprime.io/advisories/CVE-2025-24470/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Feb 2025 16:08:58 GMTCVECVE-2022-23439: A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests, where the `Host` header points to an arbitr…https://agentprime.io/advisories/CVE-2022-23439/https://agentprime.io/advisories/CVE-2022-23439/CVSS 4.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jan 2025 09:10:28 GMTCVECVE-2024-35278: SQL injection in Fortinet FortiPortalhttps://agentprime.io/advisories/CVE-2024-35278/https://agentprime.io/advisories/CVE-2024-35278/CVSS 4.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Jan 2025 14:09:45 GMTCVECVE-2024-52967: Cross-site scripting in Fortinet FortiPortalhttps://agentprime.io/advisories/CVE-2024-52967/https://agentprime.io/advisories/CVE-2024-52967/CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Jan 2025 14:09:44 GMTCVECVE-2024-26011: Missing authentication in Fortinet FortiManager and othershttps://agentprime.io/advisories/CVE-2024-26011/https://agentprime.io/advisories/CVE-2024-26011/CVSS 5.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Nov 2024 18:53:56 GMTCVECVE-2023-47543: Insecure direct object reference in Fortinet FortiPortalhttps://agentprime.io/advisories/CVE-2023-47543/https://agentprime.io/advisories/CVE-2023-47543/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Nov 2024 18:53:51 GMTCVECVE-2024-21759: Insecure direct object reference in Fortinet FortiPortalhttps://agentprime.io/advisories/CVE-2024-21759/https://agentprime.io/advisories/CVE-2024-21759/CVSS 3.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jul 2024 15:33:31 GMTCVECVE-2024-31495: SQL injection in Fortinet FortiPortalhttps://agentprime.io/advisories/CVE-2024-31495/https://agentprime.io/advisories/CVE-2024-31495/CVSS 3.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Jun 2024 14:31:58 GMTCVECVE-2023-48789: Fortinet FortiPortal: A client-side enforcement of server-side security in Fortinet FortiPortal version 6.0.0…https://agentprime.io/advisories/CVE-2023-48789/https://agentprime.io/advisories/CVE-2023-48789/CVSS 4.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Jun 2024 07:57:22 GMTCVECVE-2024-23105: Fortinet FortiPortal: A Use Of Less Trusted Source [CWE-348] vulnerability in Fortinet FortiPortal version…https://agentprime.io/advisories/CVE-2024-23105/https://agentprime.io/advisories/CVE-2024-23105/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 May 2024 16:19:14 GMTCVECVE-2024-21761: Improper authorization in Fortinet FortiPortalhttps://agentprime.io/advisories/CVE-2024-21761/https://agentprime.io/advisories/CVE-2024-21761/CVSS 3.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Mar 2024 15:09:16 GMTCVECVE-2023-41842: Uncontrolled format string in Fortinet FortiPortal and othershttps://agentprime.io/advisories/CVE-2023-41842/https://agentprime.io/advisories/CVE-2023-41842/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Mar 2024 15:09:16 GMTCVECVE-2023-48783: Insecure direct object reference in Fortinet FortiPortalhttps://agentprime.io/advisories/CVE-2023-48783/https://agentprime.io/advisories/CVE-2023-48783/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Jan 2024 17:51:38 GMTCVECVE-2023-46712: Improper access control in Fortinet FortiPortalhttps://agentprime.io/advisories/CVE-2023-46712/https://agentprime.io/advisories/CVE-2023-46712/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Jan 2024 17:51:37 GMTCVECVE-2023-48791: Command injection in Fortinet FortiPortalhttps://agentprime.io/advisories/CVE-2023-48791/https://agentprime.io/advisories/CVE-2023-48791/CVSS 7.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Dec 2023 06:45:22 GMTCVECVE-2022-27490: Information disclosure in Fortinet FortiManager and othershttps://agentprime.io/advisories/CVE-2022-27490/https://agentprime.io/advisories/CVE-2022-27490/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Mar 2023 16:04:57 GMTCVECVE-2022-43954: Sensitive information in log files in Fortinet FortiPortalhttps://agentprime.io/advisories/CVE-2022-43954/https://agentprime.io/advisories/CVE-2022-43954/CVSS 4.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 Feb 2023 18:05:20 GMTCVECVE-2022-41336: Cross-site scripting in Fortinet FortiPortalhttps://agentprime.io/advisories/CVE-2022-41336/https://agentprime.io/advisories/CVE-2022-41336/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Jan 2023 16:58:06 GMTCVECVE-2021-36171: The use of a cryptographically weak pseudo-random number generator in the password reset feature of FortiPortal before 6.0.6 may allow a remote unauthenticated attacker to predict parts of or the who…https://agentprime.io/advisories/CVE-2021-36171/https://agentprime.io/advisories/CVE-2021-36171/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Mar 2022 18:05:10 GMTCVECVE-2021-42757: Buffer overflow in Fortinet FortiOS and othershttps://agentprime.io/advisories/CVE-2021-42757/https://agentprime.io/advisories/CVE-2021-42757/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Dec 2021 11:01:11 GMTCVECVE-2021-36174: A memory allocation with excessive size value vulnerability in the license verification function of FortiPortal before 6.0.6 may allow an attacker to perform a denial of service attack via specially…https://agentprime.io/advisories/CVE-2021-36174/https://agentprime.io/advisories/CVE-2021-36174/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Nov 2021 18:15:44 GMTCVECVE-2021-36176: Multiple uncontrolled resource consumption vulnerabilities in the web interface of FortiPortal before 6.0.6 may allow a single low-privileged user to induce a denial of service via multiple HTTP requ…https://agentprime.io/advisories/CVE-2021-36176/https://agentprime.io/advisories/CVE-2021-36176/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Nov 2021 18:10:57 GMTCVECVE-2021-32595: Multiple uncontrolled resource consumption vulnerabilities in the web interface of FortiPortal before 6.0.6 may allow a single low-privileged user to induce a denial of service via multiple HTTP requ…https://agentprime.io/advisories/CVE-2021-32595/https://agentprime.io/advisories/CVE-2021-32595/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Nov 2021 18:04:20 GMTCVECVE-2021-36172: An improper restriction of XML external entity reference vulnerability in the parser of XML responses of FortiPortal before 6.0.6 may allow an attacker who controls the producer of XML reports consum…https://agentprime.io/advisories/CVE-2021-36172/https://agentprime.io/advisories/CVE-2021-36172/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Nov 2021 17:35:11 GMTCVECVE-2021-36181: A concurrent execution using shared resource with improper Synchronization vulnerability ('Race Condition') in the customer database interface of FortiPortal before 6.0.6 may allow an authenticated,…https://agentprime.io/advisories/CVE-2021-36181/https://agentprime.io/advisories/CVE-2021-36181/CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Nov 2021 17:22:57 GMTCVECVE-2021-32602: An improper neutralization of input during web page generation vulnerability (CWE-79) in FortiPortal GUI 6.0.4 and below, 5.3.6 and below, 5.2.6 and below, 5.1.2 and below, 5.0.3 and below, 4.2.2 and…https://agentprime.io/advisories/CVE-2021-32602/https://agentprime.io/advisories/CVE-2021-32602/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 18 Aug 2021 23:40:25 GMTCVECVE-2021-32588: A use of hard-coded credentials (CWE-798) vulnerability in FortiPortal versions 5.2.5 and below, 5.3.5 and below, 6.0.4 and below, versions 5.1.x and 5.0.x may allow a remote and unauthenticated atta…https://agentprime.io/advisories/CVE-2021-32588/https://agentprime.io/advisories/CVE-2021-32588/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 18 Aug 2021 21:30:12 GMTCVEcriticalCVE-2021-32596: A use of one-way hash with a predictable salt vulnerability in the password storing mechanism of FortiPortal 6.0.0 through 6.04 may allow an attacker already in possession of the password store to de…https://agentprime.io/advisories/CVE-2021-32596/https://agentprime.io/advisories/CVE-2021-32596/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Aug 2021 15:35:29 GMTCVECVE-2021-36168: Fortinet FortiPortal: A Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in…https://agentprime.io/advisories/CVE-2021-36168/https://agentprime.io/advisories/CVE-2021-36168/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Aug 2021 15:01:20 GMTCVECVE-2021-32590: Multiple improper neutralization of special elements used in an SQL command vulnerabilities in FortiPortal 6.0.0 through 6.0.4, 5.3.0 through 5.3.5, 5.2.0 through 5.2.5, and 4.2.2 and earlier may all…https://agentprime.io/advisories/CVE-2021-32590/https://agentprime.io/advisories/CVE-2021-32590/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Aug 2021 13:31:30 GMTCVEcriticalCVE-2021-32594: An unrestricted file upload vulnerability in the web interface of FortiPortal 6.0.0 through 6.0.4, 5.3.0 through 5.3.5, 5.2.0 through 5.2.5, and 4.2.2 and earlier may allow a low-privileged user to p…https://agentprime.io/advisories/CVE-2021-32594/https://agentprime.io/advisories/CVE-2021-32594/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Aug 2021 13:26:46 GMTCVECVE-2017-7340: Fortinet FortiPortal: A Cross-Site Scripting vulnerability in Fortinet FortiPortal versions 4.0.0 and below…https://agentprime.io/advisories/CVE-2017-7340/https://agentprime.io/advisories/CVE-2017-7340/Published by the CVE Program. Not analysed by agentprime yet.Mon, 25 Mar 2019 20:55:59 GMTCVE