FO
Network Security
FortiManager
On CISA KEVExploited in the wild
118
CVEs
2
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 14High 40Medium 57Low 6
Watch
Add FortiManager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-36192 | 3.8 | Nov 3 | An exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in FortiManager 7.0.1 and below, 6.4.6 and below, 6.2.x, 6.0.x, 5.6.0 may allow a FortiGate… Affected: 5.6.0 through 5.6.11; 6.0.0 through 6.0.11; 6.2.0 through 6.2.8; 6.4.0 before 6.4.6; 7.0.0 before 7.0.1 |
| CVE-2026-22629 | 3.7 | Mar 10 | An improper restriction of excessive authentication attempts vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4 all versions, FortiAnalyzer 7.2 all… Affected: 6.4.0 before 7.6.5 |
| CVE-2021-36170 | 3.2 | Oct 6 | An information disclosure vulnerability [CWE-200] in FortiAnalyzerVM and FortiManagerVM versions 7.0.0 and 6.4.6 and below may allow an authenticated attacker to read the… Affected: before 6.4.7; 7.0.0 before 7.0.1 |
| CVE-2025-24474 | 2.7 | Jul 8 | An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiManager 7.6.0 through 7.6.1, 7.4.0 through 7.4.6, 7.2 all… Affected: 6.4.0 before 7.4.7; 7.6.0 before 7.6.2 |
| CVE-2022-38377 | 2.7 | Nov 25 | An improper access control vulnerability [CWE-284] in FortiManager 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.7, 6.2.0 through 6.2.9, 6.0.0 through 6.0.11 and FortiAnalyzer… Affected: 6.0.0 through 6.0.11; 6.2.0 through 6.2.9; 6.4.0 through 6.4.7; 7.0.0 through 7.0.3; 7.2.0 |
| CVE-2024-35274 | 2.3 | Nov 12 | An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiAnalyzer versions below 7.4.2, Fortinet FortiManager… Affected: 6.2.0 before 7.4.3 |
Showing 6