Fortianalyzer Big Data (Fortinet) - vulnerabilities (CVEs)
13 CVEs, 0 in the last 30 days, 27 known versions, newest CVE from 2026-03-10. Vendor: Fortinet.
CVEs of Fortianalyzer Big Data
- CVE-2025-49784 - CVSS 7.2 (high), 2026-03-10: An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4,…
- CVE-2024-33501 - CVSS 6.7 (medium), 2025-03-11: Two improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in Fortinet FortiAnalyzer version 7.4.0…
- CVE-2024-32123 - CVSS 6.7 (medium), 2025-03-11: Multiple improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiManager, FortiAnalyzer versions 7.4.0…
- CVE-2024-40584 - CVSS 7.2 (high), 2025-02-11: An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiAnalyzer version 7.4.0…
- CVE-2024-35274 - CVSS 2.3 (low), 2024-11-12: An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiAnalyzer versions below 7.4.2,…
- CVE-2024-32118 - CVSS 6.7 (medium), 2024-11-12: Multiple improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiManager version…
- CVE-2024-32117 - CVSS 4.9 (medium), 2024-11-12: An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiManager version 7.4.0 through 7.4.2…
- CVE-2024-32116 - CVSS 6 (medium), 2024-11-12: Multiple relative path traversal vulnerabilities [CWE-23] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, FortiAnalyzer version 7.4.0…
- CVE-2024-31496 - CVSS 6.7 (medium), 2024-11-12: A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, FortiAnalyzer version 7.4.0…
- CVE-2024-23666 - CVSS 8.8 (high), 2024-11-12: A client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigData at least version 7.4.0 and 7.2.0 through 7.2.6 and 7.0.1 through 7.0.6 and…
- CVE-2023-44255 - CVSS 4.1 (medium), 2024-11-12: An exposure of sensitive information to an unauthorized actor [CWE-200] in Fortinet FortiManager before 7.4.2, FortiAnalyzer before 7.4.2 and…
- CVE-2023-44254 - CVSS 6.5 (medium), 2024-09-10: An authorization bypass through user-controlled key [CWE-639] vulnerability in FortiAnalyzer version 7.4.1 and before 7.2.5 and FortiManager version 7.4.1 and…
- CVE-2023-41842 - CVSS 6.7 (medium), 2024-03-12: A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet allows a privileged attacker to execute unauthorized code or…
