Advisories · Technology

Fortinet FortiSOAR.

Every CVE that names Fortinet FortiSOAR among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-48892 CVE record

CVSS 6.4 Medium

Path traversal in Fortinet FortiSOAR
- Fortinet FortiSOAR
- Path traversal
Not analysed yet 12 Aug 2025
CVE-2025-32932 CVE record

CVSS 6.2 Medium

Cross-site scripting in Fortinet FortiSOAR
- Fortinet FortiSOAR
- Cross-site scripting (XSS)
Not analysed yet 12 Aug 2025
CVE-2024-21760 CVE record

CVSS 7.7 High

Code injection in Fortinet FortiSOAR
- Fortinet FortiSOAR
- Code injection
Not analysed yet 18 Mar 2025
CVE-2024-47572 CVE record

CVSS 8.3 High

CSV injection in Fortinet FortiSOAR
- Fortinet FortiSOAR
- Other injection
Not analysed yet 14 Jan 2025
CVE-2024-48890 CVE record

CVSS 6.3 Medium

OS command injection in Fortinet FortiSOAR
- Fortinet FortiSOAR
- Command injection
Not analysed yet 14 Jan 2025
CVE-2024-36510 CVE record

CVSS 4.9 Medium

Fortinet FortiClientEMS: An observable response discrepancy vulnerability [CWE-204] in FortiClientEMS 7.4.0…
- Fortinet FortiClientEMS
- Fortinet FortiSOAR
- CWE-204
Not analysed yet 14 Jan 2025
CVE-2024-48893 CVE record

CVSS 6.4 Medium

Cross-site scripting in Fortinet FortiSOAR
- Fortinet FortiSOAR
- Cross-site scripting (XSS)
Not analysed yet 14 Jan 2025
CVE-2024-45327 CVE record

CVSS 7.1 High

Unlimited authentication attempts in Fortinet FortiSOAR
- Fortinet FortiSOAR
- Authentication bypass
Not analysed yet 11 Sept 2024
CVE-2023-26211 CVE record

CVSS 6.4 Medium

Cross-site scripting in Fortinet FortiSOAR
- Fortinet FortiSOAR
- Cross-site scripting (XSS)
Not analysed yet 13 Aug 2024
CVE-2023-23775 CVE record

CVSS 5.9 Medium

SQL injection in Fortinet FortiSOAR
- Fortinet FortiSOAR
- SQL injection
Not analysed yet 11 Jun 2024
CVE-2024-31493 CVE record

CVSS 6.0 Medium

Fortinet FortiSOAR: An improper removal of sensitive information before storage or transfer vulnerability…
- Fortinet FortiSOAR
- CWE-212
Not analysed yet 3 Jun 2024
CVE-2023-27995 CVE record

CVSS 7.2 High

Template injection in Fortinet FortiSOAR
- Fortinet FortiSOAR
- Code injection
Not analysed yet 11 Apr 2023
CVE-2023-25605 CVE record

CVSS 7.5 High

Improper access control in Fortinet FortiSOAR
- Fortinet FortiSOAR
- Broken access control
Not analysed yet 7 Mar 2023
CVE-2022-38379 CVE record

CVSS 3.4 Low

Cross-site scripting in Fortinet FortiSOAR
- Fortinet FortiSOAR
- Cross-site scripting (XSS)
Not analysed yet 6 Dec 2022
CVE-2022-42473 CVE record

CVSS 5.3 Medium

Fortinet FortiSOAR: A missing authentication for a critical function vulnerability in Fortinet FortiSOAR…
- Fortinet FortiSOAR
Not analysed yet 2 Nov 2022
CVE-2022-29061 CVE record

CVSS 7.2 High

Fortinet FortiSOAR: An improper neutralization of special elements used in an OS command ('OS Command…
- Fortinet FortiSOAR
Not analysed yet 9 Sept 2022
CVE-2022-35847 CVE record

CVSS 6.3 Medium

An improper neutralization of special elements used in a template engine vulnerability [CWE-1336] in FortiSOAR management interface 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.4 may allow a remote…
- Fortinet FortiSOAR
Not analysed yet 6 Sept 2022
CVE-2022-30298 CVE record

CVSS 7.0 High

Fortinet FortiSOAR: An improper privilege management vulnerability [CWE-269] in Fortinet FortiSOAR before…
- Fortinet FortiSOAR
Not analysed yet 6 Sept 2022
CVE-2022-29062 CVE record

CVSS 6.3 Medium

Fortinet FortiSOAR: Multiple relative path traversal vulnerabilities [CWE-23] in Fortinet FortiSOAR before…
- Fortinet FortiSOAR
Not analysed yet 6 Sept 2022
CVE-2022-23443 CVE record

CVSS 7.5 High

Fortinet FortiSOAR: An improper access control in Fortinet FortiSOAR before 7.2.0 allows unauthenticated…
- Fortinet FortiSOAR
Not analysed yet 4 May 2022