Fortinet FortiAnalyzer

Name: Fortinet FortiAnalyzer
Brand: Fortinet

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

3critical17high30medium3low

updated 2026-10-27

vulnerabilities (82)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-24858US	—OT critical	86.6% (100th)	KEV	7.2.12	2026-01-27	9 versions
CVE-2023-25610US	—	18.3% (97th)	Exploit	no fix	2025-03-24	5 versions
CVE-2023-42791US	high8.8	3.99% (90th)	Exploit	no fix	2024-02-20	5 versions
CVE-2024-23666US	high8.8	2.73% (86th)	Exploit	7.4.3	2024-11-12	11 versions
CVE-2021-32589US	critical9.8	8.88% (95th)	—	no fix	2024-12-19	8 versions
CVE-2024-40584US	—	2.01% (81st)	—	7.0.9	2025-02-11	12 versions
CVE-2023-44256US	medium6.5	1.79% (78th)	—	no fix	2023-10-20	4 versions
CVE-2023-42787US	medium6.5	1.74% (78th)	—	no fix	2023-10-10	5 versions
CVE-2023-25607US	high7.8	1.65% (76th)	—	no fix	2023-10-10	5 versions
CVE-2023-42788US	medium6.7	1.55% (75th)	—	no fix	2023-10-10	5 versions
CVE-2026-84387US	—	1.40% (72nd)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2024-36512US	high7.2	1.39% (72nd)	—	no fix	2025-01-14	4 versions
CVE-2024-33502US	high7.2	1.33% (71st)	—	no fix	2025-01-14	6 versions
CVE-2026-84392US	—	1.07% (65th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2023-44249US	medium6.5	0.94% (61st)	—	no fix	2023-10-10	5 versions
CVE-2026-22828US	—	0.90% (59th)	—	no fix	2026-04-14	2 versions
CVE-2025-54820US	—	0.89% (59th)	—	no fix	2026-03-10	≤ vers:unknown/*
CVE-2024-32117US	medium4.9	0.85% (58th)	—	6.4.15	2024-11-12	13 versions
CVE-2024-35275US	high8.8	0.84% (58th)	—	no fix	2025-01-14	≤ 7.4.0 ≤7.4.3
CVE-2024-35273US	high8.8	0.68% (52nd)	—	no fix	2025-01-14	≤ 7.4.0 ≤7.4.3
CVE-2023-44253US	medium5.0	0.68% (52nd)	—	no fix	2024-02-15	5 versions
CVE-2022-30304US	medium6.1	0.66% (51st)	—	no fix	2023-02-16	5 versions
CVE-2018-13375US	medium6.1	0.65% (51st)	—	no fix	2019-05-28	≤ FortiAnalyzer 5.6.0 and below
CVE-2024-45330US	high7.2	0.63% (50th)	—	7.2.6	2024-10-08	6 versions
CVE-2024-32118US	medium6.7	0.61% (49th)	—	7.0.13	2024-11-12	13 versions
CVE-2025-68648US	—	0.59% (48th)	—	7.2.11	2026-03-10	9 versions
CVE-2022-38377US	low2.7	0.59% (48th)	—	no fix	2022-11-25	5 versions
CVE-2026-22572US	—OT elevated	0.58% (48th)	—	7.2.11	2026-03-10	8 versions
CVE-2024-50563US	critical9.8	0.57% (47th)	—	no fix	2025-01-16	2 versions
CVE-2023-41838US	high7.1	0.57% (47th)	—	no fix	2023-10-10	5 versions
CVE-2023-25606US	medium6.5	0.55% (46th)	—	no fix	2023-07-11	3 versions
CVE-2023-44255US	medium4.1	0.55% (46th)	—	7.4.3	2024-11-12	13 versions
CVE-2025-48418US	high7.2	0.54% (45th)	—	7.6.4	2026-03-10	10 versions
CVE-2024-50571US	—	0.54% (45th)	—	7.6.3	2025-10-14	11 versions
CVE-2023-44254US	medium6.5	0.53% (44th)	—	7.2.5	2024-09-10	7 versions
CVE-2026-84390US	—	0.52% (44th)	—	no fix	2026-09-11	≤ vers:unknown/*
CVE-2021-42757US	medium6.7	0.52% (44th)	—	no fix	2021-12-08	4 versions
CVE-2024-52962US	—	0.51% (43rd)	—	7.6.2	2025-04-08	8 versions
CVE-2025-61848US	—	0.51% (43rd)	—	7.4.9	2026-04-14	5 versions
CVE-2024-26013US	—	0.51% (43rd)	—	6.4.15	2025-04-08	5 versions
CVE-2024-33505US	high7.3	0.48% (41st)	—	6.4.15	2024-11-12	10 versions
CVE-2022-22305US	medium4.2	0.48% (41st)	—	no fix	2023-09-01	4 versions
CVE-2022-27490US	medium6.5	0.47% (40th)	—	no fix	2023-03-07	2 versions
CVE-2025-49784US	high7.2	0.46% (40th)	—	7.4.8	2026-03-10	6 versions
CVE-2025-53845US	medium6.5	0.46% (39th)	—	7.6.3	2025-10-14	10 versions
CVE-2022-23439US	medium6.1	0.45% (39th)	—	no fix	2025-01-22	5 versions
CVE-2024-32123US	—	0.44% (38th)	—	7.2.6	2025-03-11	11 versions
CVE-2023-42782US	medium5.3OT elevated	0.43% (37th)	—	no fix	2023-10-10	5 versions
CVE-2024-35276US	critical9.8	0.43% (37th)	—	no fix	2025-01-14	4 versions
CVE-2025-67604US	—	0.42% (36th)	—	7.6.5	2026-05-12	7 versions

showing 50 of 82

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')10 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')6 CVEs
CWE-787Out-of-bounds Write6 CVEs
CWE-121Stack-based Buffer Overflow5 CVEs
CWE-23Relative Path Traversal5 CVEs
CWE-284Improper Access Control5 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')5 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs

sources (3)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)68 CVEs
DECERT-Bund (BSI CSAF)35 CVEs
NLNCSC-NL (CSAF)21 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan