Fortinet FortiManager Cloud

Name: Fortinet FortiManager Cloud
Brand: Fortinet

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

by severity

2critical4high2medium0low

updated 2026-10-27

vulnerabilities (27)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-48884US	critical9.1	15.2% (97th)	—	no fix	2025-01-14	≤ 7.4.1 ≤7.4.3
CVE-2026-84387US	—	1.40% (72nd)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2024-50566US	high8.8	1.10% (65th)	—	no fix	2025-01-14	2 versions
CVE-2026-84392US	—	1.07% (65th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2026-22828US	—	0.90% (59th)	—	no fix	2026-04-14	2 versions
CVE-2025-54820US	—	0.89% (59th)	—	no fix	2026-03-10	≤ vers:unknown/*
CVE-2025-68648US	—	0.59% (48th)	—	no fix	2026-03-10	5 versions
CVE-2026-22572US	—OT elevated	0.58% (48th)	—	no fix	2026-03-10	≤ vers:unknown/*
CVE-2025-48418US	high7.2	0.54% (45th)	—	no fix	2026-03-10	6 versions
CVE-2024-50571US	—	0.54% (45th)	—	no fix	2025-10-14	5 versions
CVE-2026-84390US	—	0.52% (44th)	—	no fix	2026-09-11	≤ vers:unknown/*
CVE-2025-61848US	—	0.51% (43rd)	—	no fix	2026-04-14	2 versions
CVE-2024-47569US	—	0.47% (41st)	—	no fix	2025-10-14	≤ 7.4.1 ≤7.4.3
CVE-2025-49784US	high7.2	0.46% (40th)	—	no fix	2026-03-10	≤ vers:unknown/*
CVE-2026-70468US	—OT elevated	0.46% (40th)	—	no fix	2026-08-12	4 versions
CVE-2024-35276US	critical9.8	0.43% (37th)	—	no fix	2025-01-14	4 versions
CVE-2025-68649US	medium6.5	0.41% (35th)	—	no fix	2026-04-14	5 versions
CVE-2026-84391US	—	0.41% (35th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2026-26084US	—	0.39% (33rd)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2026-22629US	—	0.38% (32nd)	—	no fix	2026-03-10	6 versions
CVE-2026-84393US	—	0.28% (20th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2026-22575US	—	0.24% (16th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2026-84385US	—	0.23% (14th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2026-84389US	—	0.22% (12th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2024-33503US	high7.8	0.22% (12th)	—	no fix	2025-01-14	3 versions
CVE-2025-68482US	medium5.9	0.19% (9th)	—	no fix	2026-03-10	6 versions
CVE-2026-84386US	—	0.14% (4th)	—	no fix	2026-09-08	≤ vers:unknown/*

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control3 CVEs
CWE-121Stack-based Buffer Overflow2 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-288Authentication Bypass Using an Alternate Path or Channel2 CVEs
CWE-787Out-of-bounds Write2 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs

sources (2)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)21 CVEs
EUEU Vulnerability Database (ENISA)14 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan