Home/Product/fortinet fortivoice
Product

fortinet fortivoice

24 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2024-23104
>= 7.0.0 and < 7.0.2
An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiNDR 7.6.0, FortiNDR 7.4.0 through 7.4
5.4MEDIUM
 CVE-2025-55717
>= 7.0.0 and < 7.0.7
A cleartext storage of sensitive information vulnerability [CWE-312] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.2, Fort
4.0MEDIUM
 CVE-2025-58693
>= 7.0.0 and < 7.0.8
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiVoice 7.2.0 throu
6.5MEDIUM
 CVE-2025-64156
>= 6.0.0 and <= 6.0.12
An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiVoice 7.2.0
7.2HIGH
 CVE-2025-60024
>= 7.0.0 and < 7.0.8
Multiple Improper Limitations of a Pathname to a Restricted Directory ('Path Traversal') vulnerabilities [CWE-22] vulnerability in
8.8HIGH
 CVE-2025-58692
>= 7.0.0 and < 7.0.8
An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] vulnerability in Fo
8.8HIGH
 CVE-2024-47569
>= 6.0.7 and < 6.4.10
A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 throu
4.3MEDIUM
 CVE-2025-47856
>= 6.4.0 and < 6.4.11
Two improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortine
7.2HIGH
 CVE-2024-40588
>= 6.0.0 and < 6.4.10
Multiple relative path traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiCamera 2.1 all versions, FortiCamera 2.0.
4.4MEDIUM
 CVE-2025-32756
>= 6.4.0 and < 6.4.11
A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 a
9.8CRITICAL
 CVE-2024-50565
>= 6.0.0 and < 6.4.9
A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS version 7.4.0 th
3.1LOW
 CVE-2024-26013
>= 6.0.0 and < 6.4.9
A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS version 7.4.0 th
7.5HIGH
 CVE-2021-24008
>= 6.0.0 and < 6.0.7
An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiDDoS version 5.4.0,
5.3MEDIUM
 CVE-2022-23439
>= 6.0.0 and < 6.4.9
A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches
4.7MEDIUM
 CVE-2024-48885
>= 6.0.0 and <= 6.4.10
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiRecorder 7.2.0 thr
5.3MEDIUM
 CVE-2024-48884
>= 6.0.0 and <= 6.4.10
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager 7.6.0 thro
7.5HIGH
 CVE-2024-40587
>= 6.0.0 and < 6.4.10
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet F
6.7MEDIUM
 CVE-2023-37931
>= 6.0.0 and < 6.4.9
An improper neutralization of special elements used in an sql command ('sql injection') vulnerability [CWE-88] in FortiVoice Entre
8.8HIGH
 CVE-2023-40720
>= 6.0.0 and <= 6.0.12
An authorization bypass through user-controlled key vulnerability [CWE-639] in FortiVoiceEntreprise version 7.0.0 through 7.0.1 an
7.1HIGH
 CVE-2023-37932
>= 6.0.0 and <= 6.0.12
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability [CWE-22] in FortiVoiceEntreprise v
6.5MEDIUM
 CVE-2022-27488
>= 6.0.0 and <= 6.0.11
A cross-site request forgery (CSRF) in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x, FortiSwitch version 7.0.0 through 7.0.4
8.3HIGH
 CVE-2021-42755
all versions
An integer overflow / wraparound vulnerability [CWE-190] in FortiSwitch 7.0.2 and below, 6.4.9 and below, 6.2.x, 6.0.x; FortiRecor
4.3MEDIUM
 CVE-2021-42757
>= 6.0.0 and <= 6.0.10
A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authe
6.7MEDIUM
 CVE-2020-9294
>= 6.0.0 and <= 6.0.1
An improper authentication vulnerability in FortiMail 5.4.10, 6.0.7, 6.2.2 and earlier and FortiVoiceEntreprise 6.0.0 and 6.0.1 ma
9.8CRITICAL
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh  ·  Open-source threat intelligence platform  ·  100+ authoritative sources  ·  Every fact traces to its origin