Fortinet Inc. FortiPAM

Name: Fortinet Inc. FortiPAM
Brand: Fortinet Inc.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

3critical9high6medium0low

updated 2026-10-27

vulnerabilities (23)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-23113US	critical9.8OT critical	61.7% (99th)	KEV	no fix	2024-02-15	3 versions
CVE-2025-61624US	medium6.5OT critical	1.34% (71st)	KEV	no fix	2026-04-14	8 versions
CVE-2026-84388US	—	0.38% (32nd)	Exploit	no fix	2026-09-22	2 versions
CVE-2023-36639US	high8.8	1.06% (64th)	—	no fix	2023-12-13	2 versions
CVE-2024-26010US	high7.5	0.79% (56th)	—	no fix	2024-06-11	2 versions
CVE-2024-26009US	high8.1OT elevated	0.73% (54th)	—	no fix	2025-08-12	3 versions
CVE-2024-45324US	—	0.73% (54th)	—	no fix	2025-03-11	5 versions
CVE-2025-57740US	high8.8	0.68% (52nd)	—	no fix	2025-10-14	6 versions
CVE-2026-59837US	—	0.67% (52nd)	—	no fix	2026-07-14	9 versions
CVE-2023-45583US	high7.2	0.66% (51st)	—	no fix	2024-05-14	2 versions
CVE-2024-26011US	critical9.8OT elevated	0.60% (48th)	—	no fix	2024-11-12	3 versions
CVE-2023-45584US	high7.2	0.59% (48th)	—	no fix	2025-08-12	2 versions
CVE-2025-49201US	critical9.8	0.58% (47th)	—	no fix	2025-10-14	6 versions
CVE-2025-22258US	high7.2	0.56% (46th)	—	no fix	2025-10-14	6 versions
CVE-2025-25248US	medium6.5	0.48% (42nd)	—	no fix	2025-08-12	6 versions
CVE-2022-45862US	high8.8	0.44% (38th)	—	no fix	2024-08-13	4 versions
CVE-2024-47570US	medium6.6	0.40% (35th)	—	no fix	2025-12-09	5 versions
CVE-2026-23573US	—	0.39% (32nd)	—	no fix	2026-07-14	9 versions
CVE-2025-22256US	high8.8	0.37% (31st)	—	no fix	2025-06-10	5 versions
CVE-2023-36640US	medium6.7	0.28% (20th)	—	no fix	2024-05-14	2 versions
CVE-2026-59839US	—	0.25% (16th)	—	no fix	2026-07-14	10 versions
CVE-2025-54821US	medium6.0	0.18% (8th)	—	no fix	2025-11-18	7 versions
CVE-2025-61713US	medium4.4	0.12% (2nd)	—	no fix	2025-11-18	7 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-134Use of Externally-Controlled Format String5 CVEs
CWE-121Stack-based Buffer Overflow2 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-287Improper Authentication2 CVEs
CWE-1021Improper Restriction of Rendered UI Layers or Frames1 CVEs
CWE-124Buffer Underwrite ('Buffer Underflow')1 CVEs
CWE-1390Weak Authentication1 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)23 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan