Fortinet Inc. FortiManager Cloud

Name: Fortinet Inc. FortiManager Cloud
Brand: Fortinet Inc.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

5critical8high2medium0low

updated 2026-10-27

vulnerabilities (24)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-47575US	critical9.8OT critical	94.8% (100th)	KEV	no fix	2024-10-23	4 versions
CVE-2024-48884US	critical9.1	15.2% (97th)	—	no fix	2025-01-14	7.4.1 → 7.4.4
CVE-2024-46662US	—	2.27% (83rd)	—	no fix	2025-03-14	7.4.1 → 7.4.3
CVE-2024-40584US	—	2.01% (81st)	—	no fix	2025-02-11	2 versions
CVE-2024-48889US	—	1.66% (77th)	—	no fix	2024-12-18	3 versions
CVE-2024-50566US	high8.8	1.10% (65th)	—	no fix	2025-01-14	3 versions
CVE-2026-22828US	—	0.90% (59th)	—	no fix	2026-04-14	7.6.2 → 7.6.4
CVE-2024-35275US	high8.8	0.84% (58th)	—	no fix	2025-01-14	7.4.1 → 7.4.3
CVE-2024-48885US	critical9.1	0.83% (57th)	—	no fix	2025-01-16	7.4.1 → 7.4.4
CVE-2024-35277US	high7.5OT elevated	0.70% (53rd)	—	no fix	2025-01-14	3 versions
CVE-2024-52964US	medium6.5	0.63% (50th)	—	no fix	2025-08-12	4 versions
CVE-2025-68648US	—	0.59% (48th)	—	no fix	2026-03-10	4 versions
CVE-2024-50563US	critical9.8	0.57% (47th)	—	no fix	2025-01-16	7.4.1 → 7.4.4
CVE-2025-48418US	high7.2	0.54% (45th)	—	no fix	2026-03-10	5 versions
CVE-2024-50571US	—	0.54% (45th)	—	no fix	2025-10-14	5 versions
CVE-2025-61848US	—	0.51% (43rd)	—	no fix	2026-04-14	4 versions
CVE-2024-33505US	high7.3	0.48% (41st)	—	no fix	2024-11-12	2 versions
CVE-2024-48886US	critical9.8	0.48% (41st)	—	no fix	2025-01-14	7.4.1 → 7.4.4
CVE-2025-68649US	medium6.5	0.41% (35th)	—	no fix	2026-04-14	4 versions
CVE-2026-22629US	—	0.38% (32nd)	—	no fix	2026-03-10	5 versions
CVE-2025-24474US	—	0.31% (24th)	—	no fix	2025-07-08	4 versions
CVE-2024-33504US	high7.7OT elevated	0.30% (23rd)	—	no fix	2025-02-11	4 versions
CVE-2024-33503US	high7.8	0.22% (12th)	—	no fix	2025-01-14	3 versions
CVE-2024-45331US	high7.8	0.21% (11th)	—	no fix	2025-01-16	3 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')4 CVEs
CWE-122Heap-based Buffer Overflow3 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3 CVEs
CWE-1390Weak Authentication2 CVEs
CWE-266Incorrect Privilege Assignment2 CVEs
CWE-269Improper Privilege Management2 CVEs
CWE-306Missing Authentication for Critical Function2 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)24 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan