threat
engine
.sh
Back
·
··:··
Home
/
Product
/
fortinet fortimanager
Product
fortinet fortimanager
112 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
Sort
Newest first
Oldest first
Highest CVSS
Lowest CVSS
Min CVSS
Any
4.0+
7.0+ (High)
9.0+ (Critical)
Published since
Reset
CVE-2025-67604
>= 7.2.0 and <= 7.2.12
A use of potentially dangerous function vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7
5.3
MEDIUM
CVE-2025-68649
>= 7.0.0 and < 7.4.8
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 7.6.0 th
6.0
MEDIUM
CVE-2025-61848
>= 7.0.0 and < 7.4.9
An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.
7.2
HIGH
CVE-2026-22629
>= 6.4.0 and < 7.6.5
An improper restriction of excessive authentication attempts vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAna
3.7
LOW
CVE-2026-22572
>= 7.2.2 and < 7.4.8
An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnal
7.2
HIGH
CVE-2025-68648
>= 7.0.0 and < 7.4.8
A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 thro
7.2
HIGH
CVE-2025-68482
>= 6.4.0 and < 7.4.9
A improper certificate validation vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8,
6.9
MEDIUM
CVE-2025-54820
>= 6.4.0 and < 7.2.11
A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2
8.1
HIGH
CVE-2025-48418
>= 6.4.0 and < 7.0.15
A hidden functionality vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyz
6.7
MEDIUM
CVE-2026-24858
>= 7.0.0 and <= 7.0.15
An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0
9.8
CRITICAL
CVE-2024-40593
>= 6.4.0 and < 7.2.6
A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnaly
6.0
MEDIUM
CVE-2024-50571
>= 6.0.0 and < 7.0.14
A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through 7.4.5, Forti
7.2
HIGH
CVE-2024-47569
>= 7.4.1 and < 7.4.4
A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 throu
4.3
MEDIUM
CVE-2024-52964
>= 6.2.0 and < 7.0.14
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiManager
5.5
MEDIUM
CVE-2025-24474
>= 6.4.0 and < 7.4.7
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiManager 7.6
2.7
LOW
CVE-2024-54020
>= 7.0.0 and < 7.0.8
A missing authorization in Fortinet FortiManager versions 7.2.0 through 7.2.1, and versions 7.0.0 through 7.0.7 may allow an authe
2.3
LOW
CVE-2024-52962
>= 7.0.0 and < 7.0.14
An Improper Output Neutralization for Logs vulnerability [CWE-117] in FortiAnalyzer version 7.6.1 and below, version 7.4.5 and be
5.3
MEDIUM
CVE-2024-50565
>= 6.2.0 and < 6.2.14
A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS version 7.4.0 th
3.1
LOW
CVE-2024-26013
>= 6.2.0 and < 6.2.14
A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS version 7.4.0 th
7.5
HIGH
CVE-2023-25610
>= 6.0.0 and < 6.0.12
A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7
9.8
CRITICAL
CVE-2024-40585
>= 6.2.0 and < 7.0.9
An insertion of sensitive information into log file vulnerabilities [CWE-532] in FortiManager version 7.4.0, version 7.2.3 and bel
6.5
MEDIUM
CVE-2024-46662
>= 7.4.1 and < 7.4.4
A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiManager versions 7.4.1 thro
8.8
HIGH
CVE-2024-33501
>= 6.0.10 and <= 6.0.12
Two improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in Fortinet FortiA
4.2
MEDIUM
CVE-2024-32123
>= 4.3.4 and < 7.2.6
Multiple improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiManager, Fort
6.7
MEDIUM
CVE-2024-40584
>= 6.2.2 and <= 6.2.13
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet F
7.2
HIGH
CVE-2024-36508
>= 6.4.0 and < 7.2.6
An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiManager
6.0
MEDIUM
CVE-2024-33504
>= 6.4.0 and < 7.2.10
A use of hard-coded cryptographic key to encrypt sensitive data vulnerability [CWE-321] in FortiManager 7.6.0 through 7.6.1, 7.4.0
4.1
MEDIUM
CVE-2024-50563
>= 7.4.1 and < 7.4.4
A weak authentication in Fortinet FortiManager Cloud, FortiAnalyzer versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiAnalyz
7.3
HIGH
CVE-2024-45331
>= 6.4.0 and < 7.2.6
A incorrect privilege assignment in Fortinet FortiAnalyzer versions 7.4.0 through 7.4.3, 7.2.0 through 7.2.5, 7.0.0 through 7.0.13
7.3
HIGH
CVE-2024-50566
>= 7.2.1 and < 7.2.9
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManage
7.2
HIGH
CVE-2024-48886
>= 7.4.1 and < 7.4.4
A weak authentication in Fortinet FortiOS versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.0.15, 6.4.0 through 6
9.0
CRITICAL
CVE-2024-48884
>= 7.4.1 and < 7.4.4
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager 7.6.0 thro
7.5
HIGH
CVE-2024-47571
>= 7.0.7 and < 7.0.9
An operation on a resource after expiration or release in Fortinet FortiManager 6.4.12 through 7.4.0 allows an attacker to gain im
8.1
HIGH
CVE-2024-36512
>= 6.2.10 and < 7.0.13
An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager, FortiAnalyzer 7.4.0 th
7.2
HIGH
CVE-2024-35277
>= 6.4.0 and < 6.4.15
A missing authentication for critical function in Fortinet FortiPortal version 6.0.0 through 6.0.15, FortiManager version 7.4.0 th
8.6
HIGH
CVE-2024-35276
>= 6.4.0 and < 6.4.15
A stack-based buffer overflow in Fortinet FortiAnalyzer versions 7.4.0 through 7.4.3, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6
5.6
MEDIUM
CVE-2024-35275
>= 7.4.0 and < 7.4.3
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiAnalyzer version 7.4.0 thr
6.6
MEDIUM
CVE-2024-35273
>= 7.4.0 and < 7.4.3
A out-of-bounds write in Fortinet FortiManager version 7.4.0 through 7.4.2, FortiAnalyzer version 7.4.0 through 7.4.2 allows attac
7.2
HIGH
CVE-2024-33503
>= 6.4.0 and < 7.2.6
A improper privilege management in Fortinet FortiManager version 7.4.0 through 7.4.3, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6
6.7
MEDIUM
CVE-2024-33502
>= 6.0.0 and < 7.2.6
An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager, FortiAnalyzer versions
6.5
MEDIUM
CVE-2024-32115
>= 7.0.0 and < 7.2.6
A relative path traversal vulnerability [CWE-23] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5 allows a p
5.5
MEDIUM
CVE-2021-32589
>= 5.0.0 and < 5.6.11
A Use After Free (CWE-416) vulnerability in FortiManager version 7.0.0, version 6.4.5 and below, version 6.2.7 and below, version
8.1
HIGH
CVE-2024-48889
>= 6.4.10 and < 6.4.15
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] in FortiManag
7.2
HIGH
CVE-2024-35274
>= 6.2.0 and < 7.4.3
An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiAnalyzer
2.3
LOW
CVE-2024-33505
>= 6.0.0 and < 7.2.7
A heap-based buffer overflow in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4
5.6
MEDIUM
CVE-2024-32118
>= 6.2.0 and < 7.2.6
Multiple improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fo
6.7
MEDIUM
CVE-2024-32117
>= 6.2.0 and < 7.2.6
An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiManager
4.9
MEDIUM
CVE-2024-32116
>= 6.2.0 and < 7.2.6
Multiple relative path traversal vulnerabilities [CWE-23] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, F
5.1
MEDIUM
CVE-2024-31496
>= 6.2.0 and < 7.2.6
A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, Forti
6.7
MEDIUM
CVE-2024-26011
>= 6.4.0 and < 6.4.15
A missing authentication for critical function in Fortinet FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.4, 7.0.0 th
5.3
MEDIUM
CVE-2024-23666
>= 6.4.0 and < 6.4.15
A client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigData at least version 7.4.0 and 7.2.0 through 7.2
7.5
HIGH
CVE-2023-44255
>= 6.2.0 and < 7.4.3
An exposure of sensitive information to an unauthorized actor [CWE-200] in Fortinet FortiManager before 7.4.2, FortiAnalyzer befor
4.1
MEDIUM
CVE-2024-47575
>= 6.2.0 and < 6.2.13
A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through
9.8
CRITICAL
CVE-2024-33506
>= 7.0.0 and < 7.2.6
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiManager 7.4.2 and below, 7.2.5 and b
3.3
LOW
CVE-2023-44254
>= 6.2.0 and < 7.2.5
An authorization bypass through user-controlled key [CWE-639] vulnerability in FortiAnalyzer version 7.4.1 and before 7.2.5 and F
5.0
MEDIUM
CVE-2024-21757
>= 7.0.0 and < 7.0.11
A unverified password change in Fortinet FortiManager versions 7.0.0 through 7.0.10, versions 7.2.0 through 7.2.4, and versions 7.
6.1
MEDIUM
CVE-2023-47542
>= 7.0.0 and < 7.0.11
A improper neutralization of special elements used in a template engine [CWE-1336] in FortiManager versions 7.4.1 and below, versi
6.7
MEDIUM
CVE-2023-41842
>= 6.2.0 and < 7.0.10
A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet allows a privileged attacker to ex
6.7
MEDIUM
CVE-2023-36554
>= 6.2.0 and <= 6.2.12
A improper access control in Fortinet FortiManager version 7.4.0, version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.10, versi
8.1
HIGH
CVE-2023-42791
>= 6.2.0 and < 6.2.12
A relative path traversal in Fortinet FortiManager version 7.4.0 and 7.2.0 through 7.2.3 and 7.0.0 through 7.0.8 and 6.4.0 through
8.8
HIGH
CVE-2023-44253
>= 6.2.0 and <= 6.2.12
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiManager version 7.4.0 throu
5.0
MEDIUM
CVE-2023-40719
>= 7.0.0 and <= 7.0.10
A use of hard-coded credentials vulnerability in Fortinet FortiAnalyzer and FortiManager 7.0.0 - 7.0.8, 7.2.0 - 7.2.3 and 7.4.0 al
4.1
MEDIUM
CVE-2023-44256
>= 7.0.0 and <= 7.0.8
A server-side request forgery vulnerability [CWE-918] in Fortinet FortiAnalyzer version 7.4.0, version 7.2.0 through 7.2.3 and bef
6.5
MEDIUM
CVE-2023-44249
>= 6.2.0 and <= 6.2.12
An authorization bypass through user-controlled key [CWE-639] vulnerability in Fortinet FortiManager version 7.4.0 and before 7.2
4.3
MEDIUM
CVE-2023-42788
>= 6.2.0 and <= 6.2.11
An improper neutralization of special elements used in an os command ('OS Command Injection') vulnerability [CWE-78] in FortiManag
7.8
HIGH
CVE-2023-42787
>= 6.2.0 and <= 6.2.12
A client-side enforcement of server-side security [CWE-602] vulnerability in Fortinet FortiManager version 7.4.0 and before 7.2.3
6.5
MEDIUM
CVE-2023-41838
>= 6.2.0 and <= 6.2.11
An improper neutralization of special elements used in an os command ('os command injection') in FortiManager 7.4.0 and 7.2.0 thro
7.1
HIGH
CVE-2023-41679
>= 6.0.0 and <= 6.0.12
An improper access control vulnerability [CWE-284] in FortiManager management interface 7.2.0 through 7.2.2, 7.0.0 through 7.0.7,
8.5
HIGH
CVE-2023-25607
>= 6.0.0 and <= 6.0.12
An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78 ] in FortiMana
7.8
HIGH
CVE-2023-36638
>= 6.4.0 and < 6.4.12
An improper privilege management vulnerability [CWE-269] in FortiManager 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 through 6
4.3
MEDIUM
CVE-2022-22305
>= 6.0.0 and <= 6.0.12
An improper certificate validation vulnerability [CWE-295] in FortiManager 7.0.1 and below, 6.4.6 and below; FortiAnalyzer 7.0.2
5.4
MEDIUM
CVE-2021-43072
>= 5.6.0 and < 6.4.8
A buffer copy without checking size of input ('classic buffer overflow') in Fortinet FortiAnalyzer version 7.0.2 and below, versio
6.7
MEDIUM
CVE-2023-25606
>= 6.4.0 and < 6.4.12
An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-23] in FortiAnalyzer and For
6.5
MEDIUM
CVE-2023-25609
>= 6.4.8 and <= 6.4.11
A server-side request forgery (SSRF) vulnerability [CWE-918] in FortiManager and FortiAnalyzer GUI 7.2.0 through 7.2.1, 7.0.0 th
4.3
MEDIUM
CVE-2023-22642
>= 6.4.8 and < 6.4.11
An improper certificate validation vulnerability [CWE-295] in FortiAnalyzer and FortiManager 7.2.0 through 7.2.1, 7.0.0 through 7.
7.5
HIGH
CVE-2022-27490
>= 5.6.0 and <= 5.6.11
A exposure of sensitive information to an unauthorized actor in Fortinet FortiManager version 6.0.0 through 6.0.4, FortiAnalyzer v
5.4
MEDIUM
CVE-2022-45857
>= 6.2.0 and < 6.2.9
An incorrect user management vulnerability [CWE-286] in the FortiManager version 6.4.6 and below VDOM creation component may allow
6.5
MEDIUM
CVE-2022-38377
>= 6.0.0 and <= 6.0.11
An improper access control vulnerability [CWE-284] in FortiManager 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.7, 6.2.0 through
4.3
MEDIUM
CVE-2022-39950
>= 6.0.0 and <= 6.2.9
An improper neutralization of input during web page generation vulnerability [CWE-79] exists in FortiManager and FortiAnalyzer 6.0
8.0
HIGH
CVE-2022-26121
> 5.6.0 and <= 5.6.11
An exposure of resource to wrong sphere vulnerability [CWE-668] in FortiAnalyzer and FortiManager GUI 7.0.0 through 7.0.3, 6.4.0 t
3.7
LOW
CVE-2022-27483
>= 6.0.0 and <= 6.0.11
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiManager version 7.0.
7.2
HIGH
CVE-2022-26118
>= 6.0.0 and <= 6.0.11
A privilege chaining vulnerability [CWE-268] in FortiManager and FortiAnalyzer 6.0.x, 6.2.x, 6.4.0 through 6.4.7, 7.0.0 through 7.
6.7
MEDIUM
CVE-2021-26104
>= 5.6.0 and < 6.0.11
Multiple OS command injection (CWE-78) vulnerabilities in the command line interface of FortiManager 6.2.7 and below, 6.4.5 and be
7.8
HIGH
CVE-2022-22303
>= 6.2.0 and <= 6.2.9
An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiManager versions pri
2.8
LOW
CVE-2022-22300
>= 5.6.0 and <= 5.6.11
A improper handling of insufficient permissions or privileges in Fortinet FortiAnalyzer version 5.6.0 through 5.6.11, FortiAnalyze
4.3
MEDIUM
CVE-2021-42757
>= 6.0.0 and <= 6.4.7
A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authe
6.7
MEDIUM
CVE-2021-36192
>= 5.6.0 and <= 5.6.11
An exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in FortiManager 7.0.1 and below, 6.4.6 and b
5.2
MEDIUM
CVE-2021-26107
all versions
An improper access control vulnerability [CWE-284] in FortiManager versions 6.4.4 and 6.4.5 may allow an authenticated attacker wi
6.3
MEDIUM
CVE-2021-36170
< 6.4.7
An information disclosure vulnerability [CWE-200] in FortiAnalyzerVM and FortiManagerVM versions 7.0.0 and 6.4.6 and below may all
3.2
LOW
CVE-2021-24017
< 6.2.7
An improper authentication in Fortinet FortiManager version 6.4.3 and below, 6.2.6 and below allows attacker to assign arbitrary P
5.4
MEDIUM
CVE-2021-24016
< 6.2.8
An improper neutralization of formula elements in a csv file in Fortinet FortiManager version 6.4.3 and below, 6.2.7 and below all
3.7
LOW
CVE-2021-24006
>= 6.4.0 and < 6.4.4
An improper access control vulnerability in FortiManager versions 6.4.0 to 6.4.3 may allow an authenticated attacker with a restri
6.3
MEDIUM
CVE-2021-32597
< 6.2.8
Multiple improper neutralization of input during web page generation (CWE-79) in FortiManager and FortiAnalyzer versions 7.0.0, 6.
4.6
MEDIUM
CVE-2021-32587
>= 5.6.0 and < 6.4.6
An improper access control vulnerability in FortiManager and FortiAnalyzer GUI interface 7.0.0, 6.4.5 and below, 6.2.8 and below,
4.3
MEDIUM
CVE-2021-32603
>= 5.6.0 and < 6.2.8
A server-side request forgery (SSRF) (CWE-918) vulnerability in FortiManager and FortiAnalyser GUI 7.0.0, 6.4.5 and below, 6.2.7 a
8.8
HIGH
CVE-2021-32598
>= 5.6.0 and < 7.0.1
An improper neutralization of CRLF sequences in HTTP headers ('HTTP Response Splitting') vulnerability In FortiManager and FortiAn
4.3
MEDIUM
CVE-2021-24022
>= 6.0.0 and < 6.2.8
A buffer overflow vulnerability in FortiAnalyzer CLI 6.4.5 and below, 6.2.7 and below, 6.0.x and FortiManager CLI 6.4.5 and below,
6.7
MEDIUM
CVE-2020-12811
>= 6.2.0 and <= 6.2.6
An improper neutralization of script-related HTML tags in a web page in FortiManager 6.2.0, 6.2.1, 6.2.2, and 6.2.3and FortiAnalyz
6.1
MEDIUM
CVE-2020-9289
<= 6.2.3
Use of a hard-coded cryptographic key to encrypt password data in CLI configuration in FortiManager 6.2.3 and below, FortiAnalyzer
7.5
HIGH
CVE-2019-17657
< 6.2.3
An Uncontrolled Resource Consumption vulnerability in Fortinet FortiSwitch below 3.6.11, 6.0.6 and 6.2.2, FortiAnalyzer below 6.2.
7.5
HIGH
CVE-2019-17654
<= 6.0.6
An Insufficient Verification of Data Authenticity vulnerability in FortiManager 6.2.1, 6.2.0, 6.0.6 and below may allow an unauthe
8.8
HIGH
CVE-2015-3613
>= 5.0.0 and <= 5.0.10
A vulnerability exists in FortiManager 5.2.1 and earlier and 5.0.10 and earlier in the WebUI FTP backup page
9.8
CRITICAL
CVE-2015-3612
>= 5.0.0 and <= 5.0.10
A Cross-site Scripting (XSS) vulnerability exists in FortiManager 5.2.1 and earlier and 5.0.10 and earlier via an unspecified para
5.4
MEDIUM
CVE-2015-3611
>= 5.0.0 and <= 5.0.10
A Command Injection vulnerability exists in FortiManager 5.2.1 and earlier and FortiManager 5.0.10 and earlier via unspecified vec
8.8
HIGH
CVE-2019-6695
<= 6.0.6
Lack of root file system integrity checking in Fortinet FortiManager VM application images of 6.2.0, 6.0.6 and below may allow an
9.8
CRITICAL
CVE-2018-13375
<= 5.6.0
An Improper Neutralization of Script-Related HTML Tags in Fortinet FortiAnalyzer 5.6.0 and below and FortiManager 5.6.0 and below
6.1
MEDIUM
CVE-2018-1360
>= 5.2.0 and <= 5.2.7
A cleartext transmission of sensitive information vulnerability in Fortinet FortiManager 5.2.0 through 5.2.7, 5.4.0 and 5.4.1 may
8.1
HIGH
CVE-2018-1353
<= 6.0.1
An information disclosure vulnerability in Fortinet FortiManager 6.0.1 and below versions allows a standard user with adom assignm
4.3
MEDIUM
CVE-2018-1351
<= 6.0.0
A Cross-site Scripting (XSS) vulnerability in Fortinet FortiManager 6.0.0, 5.6.6 and below versions allows attacker to execute HTM
4.8
MEDIUM
CVE-2018-1355
<= 5.6.5
An open redirect vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions, FortiAnalyzer 6.0.0, 5.6.5 and below vers
6.1
MEDIUM
CVE-2018-1354
<= 6.0.0
An improper access control vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions, FortiAnalyzer 6.0.0, 5.6.5 and
6.5
MEDIUM
CVE-2014-2336
<= 5.0.6
Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet FortiManager before 5.0.7 and FortiAnaly
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin