Fortinet Inc. FortiNDR (Network Detection and Response)

Name: Fortinet Inc. FortiNDR (Network Detection and Response)
Brand: Fortinet Inc.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical4high2medium0low

updated 2026-10-28

vulnerabilities (7)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-32756US	critical9.8OT critical	30.9% (98th)	KEV	no fix	2025-05-13	10 versions
CVE-2021-24023US	high8.8	0.75% (55th)	—	no fix	2021-06-03	≤ 1.4.0
CVE-2022-27488US	high8.8	0.49% (42nd)	—	no fix	2023-12-13	7 versions
CVE-2022-23439US	medium6.1	0.45% (39th)	—	no fix	2025-01-22	5 versions
CVE-2023-33302US	high8.8	0.38% (32nd)	—	no fix	2025-03-31	7 versions
CVE-2024-23104US	medium4.3	0.26% (17th)	—	no fix	2026-04-14	5 versions
CVE-2023-48790US	high8.8	0.24% (15th)	—	no fix	2025-03-11	5 versions

The flaw types (CWEs) most of these CVEs share.

CWE-352Cross-Site Request Forgery (CSRF)2 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-610Externally Controlled Reference to a Resource in Another Sphere1 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1 CVEs
CWE-787Out-of-bounds Write1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.