Fortinet FortiPortal

Name: Fortinet FortiPortal
Brand: Fortinet

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical5high14medium2low

updated 2026-10-29

vulnerabilities (36)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-11187US	—	5.23% (92nd)	Exploit	7.4.9	2026-01-27	< 7.4.9
CVE-2025-69421US	high7.5	0.94% (61st)	Exploit	7.4.9	2026-01-27	< 7.4.9
CVE-2025-69420US	—	0.92% (60th)	Exploit	7.4.9	2026-01-27	< 7.4.9
CVE-2025-69419US	—	0.61% (49th)	Exploit	7.4.9	2026-01-27	< 7.4.9
CVE-2023-48783US	medium5.4	22.2% (98th)	—	no fix	2024-01-10	4 versions
CVE-2025-24470US	—	1.33% (71st)	—	7.2.7	2025-02-11	6 versions
CVE-2023-48791US	high8.8	1.26% (70th)	—	no fix	2023-12-13	2 versions
CVE-2025-15468US	—	0.82% (57th)	—	7.4.9	2026-01-27	< 7.4.9
CVE-2023-46712US	high8.8	0.74% (55th)	—	no fix	2024-01-10	2 versions
CVE-2022-43954US	medium6.5	0.69% (53rd)	—	no fix	2023-02-16	≤ 7.0.0 ≤7.0.2
CVE-2024-26011US	critical9.8OT elevated	0.60% (48th)	—	6.0.15	2024-11-12	3 versions
CVE-2022-41336US	medium4.8	0.59% (48th)	—	no fix	2023-01-03	5 versions
CVE-2026-22796US	—	0.59% (48th)	—	7.4.9	2026-01-27	< 7.4.9
CVE-2024-31495US	low2.7	0.53% (44th)	—	no fix	2024-06-11	2 versions
CVE-2021-42757US	medium6.7	0.52% (44th)	—	no fix	2021-12-08	5 versions
CVE-2023-48789US	medium6.5	0.48% (41st)	—	no fix	2024-06-03	≤ 6.0.0 ≤6.0.14
CVE-2022-27490US	medium6.5	0.47% (40th)	—	no fix	2023-03-07	7 versions
CVE-2025-66199US	—	0.46% (40th)	—	7.4.9	2026-01-27	< 7.4.9
CVE-2022-23439US	medium6.1	0.45% (39th)	—	no fix	2025-01-22	≤ 6.0.0 ≤6.0.9
CVE-2024-23105US	high7.5	0.45% (39th)	—	no fix	2024-05-14	2 versions
CVE-2024-21761US	medium4.3	0.43% (37th)	—	no fix	2024-03-12	3 versions
CVE-2023-47543US	high8.1	0.39% (33rd)	—	7.0.4	2024-11-12	2 versions
CVE-2024-35278US	medium4.3	0.38% (32nd)	—	6.0.15	2025-01-14	5 versions
CVE-2024-52967US	medium4.8	0.37% (31st)	—	6.0.15	2025-01-14	2 versions
CVE-2024-45329US	—	0.32% (25th)	—	7.0.9	2025-06-10	6 versions
CVE-2025-54838US	medium6.5OT elevated	0.31% (23rd)	—	7.4.6	2025-12-09	2 versions
CVE-2024-21759US	medium4.3	0.29% (22nd)	—	no fix	2024-07-09	2 versions
CVE-2025-46777US	low2.7	0.25% (16th)	—	7.0.10	2025-05-28	6 versions
CVE-2023-41842US	medium6.7	0.22% (13th)	—	no fix	2024-03-12	2 versions
CVE-2025-15469US	—	0.21% (12th)	—	7.4.9	2026-01-27	< 7.4.9
CVE-2026-49938US	—	0.20% (10th)	—	7.4.8	2026-06-09	6 versions
CVE-2025-68160US	—	0.19% (8th)	—	7.4.9	2026-01-27	< 7.4.9
CVE-2026-22795US	—	0.18% (7th)	—	7.4.9	2026-01-27	< 7.4.9
CVE-2024-40590US	—	0.16% (6th)	—	7.2.5	2025-03-14	7 versions
CVE-2025-69418US	—	0.13% (3rd)	—	7.4.9	2026-01-27	< 7.4.9
CVE-2024-40593US	medium4.4	0.11% (1st)	—	no fix	2025-12-11	≤ 6.0.0 ≤6.0.15

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-639Authorization Bypass Through User-Controlled Key4 CVEs
CWE-787Out-of-bounds Write4 CVEs
CWE-476NULL Pointer Dereference3 CVEs
CWE-754Improper Check for Unusual or Exceptional Conditions3 CVEs
CWE-284Improper Access Control2 CVEs
CWE-532Insertion of Sensitive Information into Log File2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2 CVEs

sources (3)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)25 CVEs
DECERT-Bund (BSI CSAF)21 CVEs
NLNCSC-NL (CSAF)1 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan