Fortinet FortiSASE

Name: Fortinet FortiSASE
Brand: Fortinet

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

1critical2high10medium1low

updated 2026-10-27

vulnerabilities (23)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-42789US	critical9.8	3.31% (88th)	Exploit	no fix	2024-03-12	≤ 23.2.b
CVE-2024-50562US	—	1.16% (67th)	Exploit	no fix	2025-06-10	3 versions
CVE-2025-22254US	high7.2	0.85% (58th)	—	no fix	2025-06-10	3 versions
CVE-2026-59837US	—	0.67% (52nd)	—	no fix	2026-07-14	≤ 26.1.1 ≤26.1.2
CVE-2025-25250US	medium4.3	0.55% (46th)	—	no fix	2025-06-10	4 versions
CVE-2024-50568US	—	0.45% (39th)	—	no fix	2025-06-10	3 versions
CVE-2025-25255US	medium4.3	0.43% (37th)	—	no fix	2025-10-14	≤ vers:unknown/*
CVE-2024-47570US	medium6.6	0.40% (34th)	—	no fix	2025-12-09	≤ 24.1.10
CVE-2025-22251US	medium5.3	0.40% (34th)	—	no fix	2025-06-10	3 versions
CVE-2025-31366US	medium6.1	0.40% (34th)	—	no fix	2025-10-14	2 versions
CVE-2025-24471US	—	0.38% (31st)	—	no fix	2025-06-10	3 versions
CVE-2025-31514US	medium4.3	0.36% (30th)	—	no fix	2025-10-14	≤ vers:unknown/*
CVE-2025-58413US	—	0.36% (29th)	—	no fix	2025-11-18	≤ 25.3.b
CVE-2023-48786US	—	0.34% (27th)	—	no fix	2025-06-10	3 versions
CVE-2024-32119US	—	0.33% (25th)	—	no fix	2025-06-10	3 versions
CVE-2025-54822US	—	0.32% (24th)	—	no fix	2025-10-14	≤ vers:unknown/*
CVE-2025-47890US	medium6.1	0.25% (17th)	—	no fix	2025-10-14	2 versions
CVE-2025-22862US	medium6.7OT elevated	0.25% (17th)	—	no fix	2025-10-02	3 versions
CVE-2023-29184US	low2.3	0.21% (11th)	—	no fix	2025-06-10	3 versions
CVE-2023-46718US	high7.8	0.19% (8th)	—	no fix	2025-10-14	≤ vers:unknown/*
CVE-2025-54821US	medium6.0	0.18% (8th)	—	no fix	2025-11-18	≤ 25.2.91
CVE-2024-54019US	medium6.5	0.17% (6th)	—	no fix	2025-06-10	3 versions
CVE-2025-25253US	—	0.11% (1st)	—	no fix	2025-10-14	≤ vers:unknown/*

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-121Stack-based Buffer Overflow3 CVEs
CWE-269Improper Privilege Management2 CVEs
CWE-297Improper Validation of Certificate with Host Mismatch2 CVEs
CWE-532Insertion of Sensitive Information into Log File2 CVEs
CWE-787Out-of-bounds Write2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-1390Weak Authentication1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs

sources (2)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)18 CVEs
EUEU Vulnerability Database (ENISA)8 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan