Fortiisolator (Fortinet) - vulnerabilities (CVEs)
10 CVEs, 0 in the last 30 days, 31 known versions, newest CVE from 2025-10-14. Vendor: Fortinet.
CVEs of Fortiisolator
- CVE-2024-33507 - CVSS 9.1 (critical), 2025-10-14: An insufficient session expiration vulnerability [CWE-613] and an incorrect authorization vulnerability [CWE-863] in FortiIsolator 2.4.0 through 2.4.4, 2.3…
- CVE-2024-32124 - CVSS 4.3 (medium), 2025-07-18: An improper access control vulnerability [CWE-284] in FortiIsolator version 2.4.4, version 2.4.3, 2.3 all versions logging component may allow a remote…
- CVE-2024-27779 - CVSS 6.7 (medium), 2025-07-18: An insufficient session expiration vulnerability [CWE-613] in FortiSandbox FortiSandbox version 4.4.4 and below, version 4.2.6 and below, 4.0 all versions,…
- CVE-2024-54025 - CVSS 6.7 (medium), 2025-04-08: An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiIsolator CLI before…
- CVE-2024-54024 - CVSS 7.2 (high), 2025-04-08: An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiIsolator before version…
- CVE-2024-55590 - CVSS 8.8 (high), 2025-03-11: Multiple improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiIsolator version…
- CVE-2022-22298 - CVSS 7.8 (high), 2023-10-10: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiIsolator version 1.0.0, FortiIsolator version…
- CVE-2021-41020 - CVSS 8.8 (high), 2022-05-04: An improper access control vulnerability [CWE-284] in FortiIsolator versions 2.3.2 and below may allow an authenticated, non privileged attacker to regenerate…
- CVE-2020-6649 - CVSS 9.8 (critical), 2021-02-08: An insufficient session expiration vulnerability in FortiNet's FortiIsolator version 2.0.1 and below may allow an attacker to reuse the unexpired admin user…
- CVE-2020-6643 - CVSS 5.4 (medium), 2020-03-12: An improper neutralization of input vulnerability in the URL Description in Fortinet FortiIsolator version 1.2.2 allows a remote authenticated attacker to…
