fortinet fortinac

Name: fortinet fortinac
Brand: fortinet

productUS

cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

6critical14high9medium0low

updated 2026-10-28

vulnerabilities (30)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-39952US	critical9.8	99.8% (100th)	Exploit	9.4.1	2023-02-16	4 versions
CVE-2023-33299US	critical9.8	24.3% (98th)	—	no fix	2023-06-23	12 versions
CVE-2023-33300US	—	14.1% (97th)	—	7.2.2	2025-03-14	2 versions
CVE-2020-12816US	medium6.1	1.15% (67th)	—	8.7.3	2020-09-24	< 8.7.3
CVE-2022-38375US	critical9.8	1.08% (65th)	—	9.4.2	2023-02-16	2 versions
CVE-2024-31488US	critical9.0	1.01% (63rd)	—	7.2.4	2024-05-14	2 versions
CVE-2022-26117US	high8.8	0.98% (62nd)	—	9.2.4	2022-07-18	9 versions
CVE-2022-26116US	high8.8	0.83% (57th)	—	no fix	2022-05-11	9 versions
CVE-2021-24011US	high7.2	0.81% (57th)	—	8.8.2	2021-05-10	< 8.8.2
CVE-2022-40677US	high8.8	0.77% (55th)	—	no fix	2023-02-16	8 versions
CVE-2022-39946US	high7.2	0.72% (54th)	—	no fix	2023-06-13	9 versions
CVE-2019-5594US	medium6.1	0.70% (53rd)	—	no fix	2019-08-23	2 versions
CVE-2023-22633US	high7.5	0.65% (51st)	—	no fix	2023-06-13	6 versions
CVE-2023-22637US	critical9.0	0.61% (49th)	—	9.4.3	2023-05-03	8.7.0 → 9.4.3
CVE-2022-43951US	high7.5	0.59% (48th)	—	9.4.2	2023-04-11	2 versions
CVE-2022-38376US	medium6.1	0.58% (48th)	—	9.4.2	2023-02-16	3 versions
CVE-2022-39954US	critical9.1	0.55% (46th)	—	9.4.2	2023-02-16	2 versions
CVE-2022-40676US	medium5.4	0.51% (44th)	—	no fix	2023-03-07	8 versions
CVE-2022-45860US	high7.5	0.49% (42nd)	—	9.4.2	2023-05-03	2 versions
CVE-2023-26206US	medium6.1	0.47% (41st)	—	no fix	2024-02-15	4 versions
CVE-2023-22638US	medium5.4	0.46% (40th)	—	no fix	2023-02-16	9 versions
CVE-2021-43065US	high7.8	0.44% (38th)	—	9.1.4	2021-12-09	3 versions
CVE-2022-43950US	medium4.7	0.42% (36th)	—	9.4.2	2023-05-03	8.7.0 → 9.4.2
CVE-2022-40675US	high7.4	0.39% (32nd)	—	9.4.2	2023-02-16	2 versions
CVE-2021-41021US	medium6.7	0.26% (17th)	—	no fix	2021-12-08	12 versions
CVE-2022-39953US	high7.8	0.21% (11th)	—	no fix	2023-03-07	9 versions
CVE-2022-45858US	high7.4OT elevated	0.20% (10th)	—	9.1.0	2023-05-03	3 versions
CVE-2023-26203US	high7.8OT elevated	0.16% (6th)	—	9.4.3	2023-05-03	2 versions
CVE-2022-45859US	medium4.4	0.14% (4th)	—	9.2.7	2023-05-03	3 versions
CVE-2022-40678US	high7.8	0.14% (4th)	—	no fix	2023-02-16	8 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')8 CVEs
CWE-269Improper Privilege Management2 CVEs
CWE-284Improper Access Control2 CVEs
CWE-522Insufficiently Protected Credentials2 CVEs
CWE-1390Weak Authentication1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-258Empty Password in Configuration File1 CVEs
CWE-264CWE-2641 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE30 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan