Fortinet FortiManager

productDE

cpe:/a:fortinet:fortimanager:-

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical9high5medium1low

updated 2026-10-27

vulnerabilities (17)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-6387US	high8.1	99.5% (100th)	Exploit	no fix	2024-07-01	2 versions
CVE-2015-0235US	high10.0	94.6% (100th)	Exploit	no fix	2015-01-28	—
CVE-2023-48795US	medium5.9OT high	93.5% (100th)	Exploit	no fix	2023-12-18	≤ vers:unknown/unknown
CVE-2025-26466US	medium5.9	38.7% (99th)	Exploit	no fix	2025-02-28	≤ vers:unknown/unknown
CVE-2023-42788US	medium6.7	1.55% (75th)	—	no fix	2023-10-10	≤ vers:unknown/unknown
CVE-2024-36512US	high7.2	1.39% (72nd)	—	no fix	2025-01-14	—
CVE-2024-33502US	high7.2	1.33% (71st)	—	no fix	2025-01-14	—
CVE-2025-22252US	high7.2OT elevated	0.95% (61st)	—	no fix	2025-05-28	≤ vers:unknown/unknown
CVE-2025-47294US	medium5.3	0.87% (59th)	—	no fix	2025-05-28	≤ vers:unknown/unknown
CVE-2024-35275US	high8.8	0.84% (58th)	—	no fix	2025-01-14	—
CVE-2025-47295US	low3.7	0.82% (57th)	—	no fix	2025-05-28	≤ vers:unknown/unknown
CVE-2024-45324US	—	0.73% (54th)	—	no fix	2025-03-11	≤ vers:unknown/unknown
CVE-2024-35273US	high8.8	0.68% (52nd)	—	no fix	2025-01-14	—
CVE-2024-35276US	critical9.8	0.43% (37th)	—	no fix	2025-01-14	—
CVE-2024-33503US	high7.8	0.22% (12th)	—	no fix	2025-01-14	—
CVE-2024-54020US	medium4.3OT elevated	0.21% (12th)	—	no fix	2025-05-28	≤ vers:unknown/unknown
CVE-2024-45331US	high7.8	0.21% (11th)	—	no fix	2025-01-16	—

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write3 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-266Incorrect Privilege Assignment2 CVEs
CWE-269Improper Privilege Management2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs
CWE-125Out-of-bounds Read1 CVEs
CWE-126Buffer Over-read1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.