FO
Product
FortiAnalyzer
On CISA KEVExploited in the wild
97
CVEs
1
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 6High 32Medium 52Low 7
Watch
Add FortiAnalyzer to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-22629 | 3.7 | Mar 10 | An improper restriction of excessive authentication attempts vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4 all versions, FortiAnalyzer 7.2 all… Affected: 7.6.0 through 7.6.4; 7.4.0 through 7.4.10; 7.2.0 through 7.2.12; 7.0.0 through 7.0.16; 6.4.0 through 6.4.15 |
| CVE-2021-36170 | 3.2 | Oct 6 | An information disclosure vulnerability [CWE-200] in FortiAnalyzerVM and FortiManagerVM versions 7.0.0 and 6.4.6 and below may allow an authenticated attacker to read the… Affected: before 6.4.7; 7.0.0 through 7.0.1 |
| CVE-2023-23776 | 3.1 | Mar 7 | An exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in FortiAnalyzer versions 7.2.0 through 7.2.1, 7.0.0 through 7.0.4 and 6.4.0 through 6.4.10… Affected: 6.4.0 before 6.4.11; 7.0.0 before 7.0.5; 7.2.0 before 7.2.2 |
| CVE-2025-24474 | 2.7 | Jul 8 | An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiManager 7.6.0 through 7.6.1, 7.4.0 through 7.4.6, 7.2 all… Affected: 6.4.0 before 7.4.7; 7.6.0 before 7.6.2 |
| CVE-2022-38377 | 2.7 | Nov 25 | An improper access control vulnerability [CWE-284] in FortiManager 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.7, 6.2.0 through 6.2.9, 6.0.0 through 6.0.11 and FortiAnalyzer… Affected: 6.0.0 through 6.0.12; 6.2.0 through 6.2.10; 6.4.0 through 6.4.8; 7.0.0 through 7.0.3; 7.2.0 |
| CVE-2024-52966 | 2.3 | Feb 11 | An exposure of sensitive information to an unauthorized actor in Fortinet FortiAnalyzer 6.4.0 through 7.6.0 allows attacker to cause information disclosure via filter manipulation Affected: 6.4.0 before 7.2.8; 7.4.0 before 7.4.5; 7.6.0 |
| CVE-2024-35274 | 2.3 | Nov 12 | An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiAnalyzer versions below 7.4.2, Fortinet FortiManager… Affected: 6.2.0 before 7.4.3 |
Showing 7