Fortimanager Cloud (Fortinet) - vulnerabilities (CVEs)
28 CVEs, 0 in the last 30 days, 52 known versions, newest CVE from 2026-08-12. Vendor: Fortinet.
CVEs of Fortimanager Cloud
- CVE-2026-70468 - CVSS 8.1 (high), 2026-08-12: A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5…
- CVE-2026-22828 - CVSS 8.1 (high), 2026-04-14: A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiManager Cloud 7.6.2 through 7.6.4 may allow a remote…
- CVE-2025-68649 - CVSS 6.5 (medium), 2026-04-14: An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer…
- CVE-2025-61848 - CVSS 7.2 (high), 2026-04-14: An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4,…
- CVE-2026-22629 - CVSS 3.7 (low), 2026-03-10: An improper restriction of excessive authentication attempts vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4 all versions,…
- CVE-2026-22572 - CVSS 7.2 (high), 2026-03-10: An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7,…
- CVE-2025-68648 - CVSS 7.2 (high), 2026-03-10: A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2…
- CVE-2025-48418 - CVSS 7.2 (high), 2026-03-10: A hidden functionality vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.0 through 7.2.10,…
- CVE-2024-47569 - CVSS 4.3 (medium), 2025-10-14: A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, FortiMail 7.0 all…
- CVE-2024-50571 - CVSS 7.2 (high), 2025-10-14: A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through 7.4.5, FortiAnalyzer 7.2.0 through…
- CVE-2024-52964 - CVSS 6.5 (medium), 2025-08-12: An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiManager version 7.6.0 through 7.6.1,…
- CVE-2025-24474 - CVSS 2.7 (low), 2025-07-08: An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiManager 7.6.0 through 7.6.1, 7.4.0…
- CVE-2024-46662 - CVSS 8.8 (high), 2025-03-14: A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiManager versions 7.4.1 through 7.4.3, FortiManager…
- CVE-2024-40584 - CVSS 7.2 (high), 2025-02-11: An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiAnalyzer version 7.4.0…
- CVE-2024-33504 - CVSS 7.7 (high), 2025-02-11: A use of hard-coded cryptographic key to encrypt sensitive data vulnerability [CWE-321] in FortiManager 7.6.0 through 7.6.1, 7.4.0 through 7.4.5, 7.2.0…
- CVE-2024-50563 - CVSS 9.8 (critical), 2025-01-16: A weak authentication in Fortinet FortiManager Cloud, FortiAnalyzer versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiAnalyzer Cloud versions 7.4.1…
- CVE-2024-45331 - CVSS 7.8 (high), 2025-01-16: A incorrect privilege assignment vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0 all…
- CVE-2024-50566 - CVSS 8.8 (high), 2025-01-14: A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManager Cloud 7.6.0 through 7.6.1,…
- CVE-2024-48886 - CVSS 9.8 (critical), 2025-01-14: A weak authentication in Fortinet FortiOS versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.0.15, 6.4.0 through 6.4.15, FortiProxy versions…
- CVE-2024-48884 - CVSS 9.1 (critical), 2025-01-14: A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager 7.6.0 through 7.6.1, FortiManager…
- CVE-2024-35277 - CVSS 8.6 (high), 2025-01-14: A missing authentication for critical function in Fortinet FortiPortal version 6.0.0 through 6.0.15, FortiManager version 7.4.0 through 7.4.2, 7.2.0 through…
- CVE-2024-35275 - CVSS 8.8 (high), 2025-01-14: A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, FortiManager…
- CVE-2024-35273 - CVSS 8.8 (high), 2025-01-14: A out-of-bounds write in Fortinet FortiManager version 7.4.0 through 7.4.2, FortiAnalyzer version 7.4.0 through 7.4.2 allows attacker to escalation of…
- CVE-2024-33503 - CVSS 7.8 (high), 2025-01-14: A improper privilege management vulnerability in Fortinet FortiManager Cloud 7.4.1 through 7.4.3, FortiManager Cloud 7.2.1 through 7.2.5, FortiManager Cloud…
- CVE-2024-35276 - CVSS 9.8 (critical), 2025-01-14: A stack-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0.0 through…
- CVE-2024-48889 - CVSS 7.2 (high), 2024-12-18: An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] in FortiManager version 7.6.0, version…
- CVE-2024-33505 - CVSS 7.3 (high), 2024-11-12: A heap-based buffer overflow in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14,…
- CVE-2024-47575 - CVSS 9.8 (critical), 2024-10-23: A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0…
