FO
Product
FortiRecorder
On CISA KEVExploited in the wild
12
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 1Medium 8Low 0
Watch
Add FortiRecorder to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-32756 In wildKEV | 9.8 | May 13 | Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability Affected: 7.2.0 through 7.2.3; 7.0.0 through 7.0.5; 6.4.0 through 6.4.5 |
| CVE-2024-48885 | 9.1 | Jan 16 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiRecorder 7.2.0 through 7.2.1, FortiRecorder 7.0.0 through 7.0.4,… Affected: 7.0.0 before 7.0.5; 7.2.0 before 7.2.2 |
| CVE-2024-48884 | 9.1 | Jan 14 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3,… Affected: 7.0.0 before 7.0.5; 7.2.0 before 7.2.2 |
| CVE-2022-27488 | 8.8 | Dec 13 | A cross-site request forgery (CSRF) in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x, FortiSwitch version 7.0.0 through 7.0.4, 6.4.0 through 6.4.10, 6.2.0 through 6.2.7,… Affected: 2.6.0 through 2.6.3; 2.7.0 through 2.7.7; 6.0.0 through 6.0.11; 6.4.0 through 6.4.2 |
| CVE-2024-56497 | 6.7 | Jan 14 | An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiMail versions 7.2.0 through 7.2.4 and 7.0.0 through 7.0.6 and 6.4.0… Affected: 6.4.0 before 6.4.5; 7.0.0 before 7.0.2 |
| CVE-2022-23439 | 6.1 | Jan 22 | A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests, where the `Host`… Affected: 6.0.0 before 6.0.11; 6.4.0 before 6.4.3 |
| CVE-2024-47566 | 6.0 | Jan 14 | A improper limitation of a pathname to a restricted directory ('path traversal') [CWE-23] in Fortinet FortiRecorder version 7.2.0 through 7.2.1 and before 7.0.4 allows a… Affected: 6.4.0 before 7.0.5; 7.2.0 before 7.2.2 |
| CVE-2021-24008 | 5.3 | Mar 28 | An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiDDoS version 5.4.0, version 5.3.2 and below, version 5.2.0, version… Affected: 6.0.0 before 6.0.4 |
| CVE-2024-46664 | 4.9 | Jan 14 | A relative path traversal in Fortinet FortiRecorder [CWE-23] version 7.2.0 through 7.2.1 and before 7.0.4 allows a privileged attacker to read files from the underlying filesystem… Affected: 6.4.0 before 7.0.5; 7.2.0 before 7.2.2 |
| CVE-2024-40588 | 4.4 | Aug 12 | Multiple relative path traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiCamera 2.1 all versions, FortiCamera 2.0.0, FortiCamera 1.1 all versions, FortiCamera 1.0… Affected: 6.4.0 before 7.0.5; 7.2.0 before 7.2.2 |
| CVE-2024-47569 | 4.3 | Oct 14 | A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, FortiMail 7.0 all versions,… Affected: 7.2.0 through 7.2.1; 7.0.0 through 7.0.4 |
| CVE-2025-55717 | 4.0 | Mar 10 | A cleartext storage of sensitive information vulnerability [CWE-312] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.2, FortiMail 7.4.0 through 7.4.4, FortiMail 7.2.0… Affected: 6.4.0 before 7.2.4 |
Showing 12