Fortianalyzer Cloud (Fortinet) - vulnerabilities (CVEs)
17 CVEs, 0 in the last 30 days, 50 known versions, newest CVE from 2026-04-14. Vendor: Fortinet.
CVEs of Fortianalyzer Cloud
- CVE-2026-22828 - CVSS 8.1 (high), 2026-04-14: A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiManager Cloud 7.6.2 through 7.6.4 may allow a remote…
- CVE-2025-68649 - CVSS 6.5 (medium), 2026-04-14: An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer…
- CVE-2025-61848 - CVSS 7.2 (high), 2026-04-14: An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4,…
- CVE-2026-22629 - CVSS 3.7 (low), 2026-03-10: An improper restriction of excessive authentication attempts vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4 all versions,…
- CVE-2025-68648 - CVSS 7.2 (high), 2026-03-10: A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2…
- CVE-2025-48418 - CVSS 7.2 (high), 2026-03-10: A hidden functionality vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.0 through 7.2.10,…
- CVE-2024-50571 - CVSS 7.2 (high), 2025-10-14: A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through 7.4.5, FortiAnalyzer 7.2.0 through…
- CVE-2025-24474 - CVSS 2.7 (low), 2025-07-08: An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiManager 7.6.0 through 7.6.1, 7.4.0…
- CVE-2024-40584 - CVSS 7.2 (high), 2025-02-11: An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiAnalyzer version 7.4.0…
- CVE-2024-50563 - CVSS 9.8 (critical), 2025-01-16: A weak authentication in Fortinet FortiManager Cloud, FortiAnalyzer versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiAnalyzer Cloud versions 7.4.1…
- CVE-2024-45331 - CVSS 7.8 (high), 2025-01-16: A incorrect privilege assignment vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0 all…
- CVE-2024-48886 - CVSS 9.8 (critical), 2025-01-14: A weak authentication in Fortinet FortiOS versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.0.15, 6.4.0 through 6.4.15, FortiProxy versions…
- CVE-2024-33503 - CVSS 7.8 (high), 2025-01-14: A improper privilege management vulnerability in Fortinet FortiManager Cloud 7.4.1 through 7.4.3, FortiManager Cloud 7.2.1 through 7.2.5, FortiManager Cloud…
- CVE-2024-35276 - CVSS 9.8 (critical), 2025-01-14: A stack-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0.0 through…
- CVE-2024-35275 - CVSS 8.8 (high), 2025-01-14: A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, FortiManager…
- CVE-2024-35273 - CVSS 8.8 (high), 2025-01-14: A out-of-bounds write in Fortinet FortiManager version 7.4.0 through 7.4.2, FortiAnalyzer version 7.4.0 through 7.4.2 allows attacker to escalation of…
- CVE-2024-45330 - CVSS 7.2 (high), 2024-10-08: A use of externally-controlled format string in Fortinet FortiAnalyzer versions 7.4.0 through 7.4.3, 7.2.2 through 7.2.5 allows attacker to escalate its…
