Public catalog

Vulnerabilities

Explore the vulnerabilities Patcharo tracks and find the ones that concern your technologies.

Intelligence updated 1 Oct 2026 at 13:38 UTC

Identifiers, titles, summaries, vendors and products of the whole published catalog; the results follow as you type.

Vendor

Product

Severity

Known exploitation

Published

Fix stated by the vendor (97)

Sort by

Active criteria

107 vulnerabilities · sorted by Publication date — newest first

61–90 of 107

CVE-2024-36512
An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager, F…
FortinetFortinet FortiManager, Fortinet FortiAnalyzer
Severity · CVSSHigh7.2
Known exploitationNone known
EPSS1%
Published14 Jan 2025Fix stated
CVE-2024-46670
An Out-of-bounds Read vulnerability [CWE-125] in FortiOS version 7.6.0, version 7.4.4 and below, version 7.2.…
FortinetFortinet FortiOS, Fortinet FortiProxy, Fortinet FortiPAM
Severity · CVSSHigh7.5
Known exploitationNone known
EPSS0.63%
Published14 Jan 2025Fix stated
CVE-2024-50566
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in…
FortinetFortinet FortiManager, Fortinet FortiManager Cloud
Severity · CVSSHigh8.8
Known exploitationNone known
EPSS1%
Published14 Jan 2025Fix stated
CVE-2024-55591
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
FortinetFortinet FortiOS, Fortinet FortiProxy
Severity · CVSSCritical9.8
Known exploitationKEVRansomwareDue 21 Jan 2025
EPSS94%
Published14 Jan 2025Fix stated
CVE-2021-32589
A Use After Free (CWE-416) vulnerability in FortiManager version 7.0.0, version 6.4.5 and below, version 6.2.…
FortinetFortinet FortiManager, Fortinet FortiAnalyzer
Severity · CVSSCritical9.8
Known exploitationNone known
EPSS9%
Published19 Dec 2024Fix stated
CVE-2020-12820
Under non-default configuration, a stack-based buffer overflow in FortiOS version 6.0.10 and below, version 5…
FortinetFortinet FortiOS
Severity · CVSSHigh8.8
Known exploitationNone known
EPSS0.89%
Published19 Dec 2024Fix stated
CVE-2020-12819
A heap-based buffer overflow vulnerability in the processing of Link Control Protocol messages in FortiGate v…
FortinetFortinet FortiOS
Severity · CVSSHigh7.5
Known exploitationNone known
EPSS0.79%
Published19 Dec 2024Fix stated
CVE-2024-48889
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability […
FortinetFortinet FortiManager
Severity · CVSSHigh7.2
Known exploitationNone known
EPSS2%
Published18 Dec 2024Fix stated
CVE-2024-33505
A heap-based buffer overflow in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.…
FortinetFortinet FortiAnalyzer, Fortinet FortiManager
Severity · CVSSHigh7.3
Known exploitationNone known
EPSS0.48%
Published12 Nov 2024Fix stated
CVE-2024-26011
A missing authentication for critical function in Fortinet FortiManager version 7.4.0 through 7.4.2, 7.2.0 th…
FortinetFortinet FortiManager, Fortinet FortiProxy, Fortinet FortiOS
Severity · CVSSCritical9.8
Known exploitationNone known
EPSS0.60%
Published12 Nov 2024Fix stated
CVE-2023-50176
A session fixation vulnerability in Fortinet FortiOS 7.4.0 through 7.4.3, FortiOS 7.2.0 through 7.2.7, FortiO…
FortinetFortinet FortiOS
Severity · CVSSHigh8.8
Known exploitationNone known
EPSS0.40%
Published12 Nov 2024Fix stated
CVE-2024-23666
A client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigData at least version 7.4.0 an…
FortinetFortinet FortiManager, Fortinet FortiAnalyzer
Severity · CVSSHigh8.8
Known exploitationNone known
EPSS3%
Published12 Nov 2024Fix stated
CVE-2024-47575
Fortinet FortiManager Missing Authentication Vulnerability
FortinetFortinet FortiManager
Severity · CVSSCritical9.8
Known exploitationKEVDue 13 Nov 2024
EPSS95%
Published23 Oct 2024Fix stated
CVE-2024-21757
A unverified password change in Fortinet FortiManager versions 7.0.0 through 7.0.10, versions 7.2.0 through 7…
FortinetFortinet FortiManager, Fortinet FortiAnalyzer
Severity · CVSSHigh7.8
Known exploitationNone known
EPSS0.19%
Published13 Aug 2024Fix stated
CVE-2022-45862
An insufficient session expiration vulnerability [CWE-613] vulnerability in FortiOS 7.2.5 and below, 7.0 all …
FortinetFortinet FortiProxy, Fortinet FortiOS, Fortinet FortiPAM
Severity · CVSSHigh8.8
Known exploitationNone known
EPSS0.44%
Published13 Aug 2024Fix stated
CVE-2024-26010
A stack-based buffer overflow in Fortinet FortiPAM version 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, F…
FortinetFortinet FortiOS, Fortinet FortiProxy, Fortinet FortiPAM
Severity · CVSSHigh7.5
Known exploitationNone known
EPSS0.79%
Published11 Jun 2024Fix stated
CVE-2023-46720
A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.7 and 7.0…
FortinetFortinet FortiOS
Severity · CVSSHigh7.8
Known exploitationNone known
EPSS0.28%
Published11 Jun 2024Fix stated
CVE-2024-23110
A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 thr…
FortinetFortinet FortiOS
Severity · CVSSHigh7.8
Known exploitationNone known
EPSS0.28%
Published11 Jun 2024Fix stated
CVE-2023-45583
A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7…
FortinetFortinet FortiOS, Fortinet FortiProxy, Fortinet FortiSwitchManager
Severity · CVSSHigh7.2
Known exploitationNone known
EPSS0.66%
Published14 May 2024Fix stated
CVE-2023-46714
A stack-based buffer overflow [CWE-121] vulnerability in Fortinet FortiOS version 7.2.1 through 7.2.6 and ver…
FortinetFortinet FortiOS
Severity · CVSSHigh7.2
Known exploitationNone known
EPSS1%
Published14 May 2024Fix stated
CVE-2023-44247
A double free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 6.4 all versions may allow a privileg…
FortinetFortinet FortiOS
Severity · CVSSHigh7.2
Known exploitationNone known
EPSS1%
Published14 May 2024No fix stated
CVE-2024-26007
An improper check or handling of exceptional conditions vulnerability [CWE-703] in Fortinet FortiOS version 7…
FortinetFortinet FortiOS
Severity · CVSSHigh7.5
Known exploitationNone known
EPSS1%
Published14 May 2024Fix stated
CVE-2023-41677
A insufficiently protected credentials in Fortinet FortiProxy 7.4.0, 7.2.0 through 7.2.6, 7.0.0 through 7.0.1…
FortinetFortinet FortiOS, Fortinet FortiProxy
Severity · CVSSHigh8.8
Known exploitationNone known
EPSS0.75%
Published9 Apr 2024Fix stated
CVE-2024-23662
An exposure of sensitive information to an unauthorized actor in Fortinet FortiOS at least version at least 7…
FortinetFortinet FortiOS
Severity · CVSSHigh7.5
Known exploitationNone known
EPSS0.70%
Published9 Apr 2024Fix stated
CVE-2023-46717
An improper authentication vulnerability [CWE-287] in FortiOS versions 7.4.1 and below, versions 7.2.6 and be…
FortinetFortinet FortiOS
Severity · CVSSHigh8.8
Known exploitationNone known
EPSS0.64%
Published12 Mar 2024Fix stated
CVE-2023-48788
Fortinet FortiClient EMS SQL Injection Vulnerability
FortinetFortinet FortiClient EMS
Severity · CVSSCritical9.8
Known exploitationKEVRansomwareDue 15 Apr 2024
EPSS98%
Published12 Mar 2024Fix stated
CVE-2023-42789
A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, For…
FortinetFortinet FortiProxy, Fortinet FortiOS, Fortinet FortiSASE
Severity · CVSSCritical9.8
Known exploitationNone known
EPSS3%
Published12 Mar 2024Fix stated
CVE-2023-42790
A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.…
FortinetFortinet FortiProxy, Fortinet FortiOS
Severity · CVSSHigh8.1
Known exploitationNone known
EPSS1%
Published12 Mar 2024Fix stated
CVE-2023-36554
A improper access control in Fortinet FortiManager version 7.4.0, version 7.2.0 through 7.2.3, version 7.0.0 …
FortinetFortinet FortiManager
Severity · CVSSCritical9.8
Known exploitationNone known
EPSS0.77%
Published12 Mar 2024Fix stated
CVE-2023-29180
A null pointer dereference in Fortinet FortiOS version 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 throu…
FortinetFortinet FortiOS, Fortinet FortiProxy
Severity · CVSSHigh7.5
Known exploitationNone known
EPSS3%
Published22 Feb 2024Fix stated