CVE-2024-47569Medium· 4.2▾ SunlitA insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, FortiMail 7.0 all versions, FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3, F…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 23.1 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.5%
A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, FortiMail 7.0 all versions, FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3, FortiManager Cloud 7.4.1 through 7.4.3, FortiNDR 7.6.0 through 7.6.1, FortiNDR 7.4.0 through 7.4.8, FortiNDR 7.2 all versions, FortiNDR 7.1 all versions, FortiNDR 7.0 all versions, FortiNDR 1.5 all versions, FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.4, FortiOS 7.2.0 through 7.2.8, FortiOS 7.0.0 through 7.0.15, FortiOS 6.4.0 through 6.4.15, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.4.0 through 7.4.4, FortiProxy 7.2.0 through 7.2.10, FortiProxy 7.0 all versions, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions, FortiRecorder 7.2.0 through 7.2.1, FortiRecorder 7.0.0 through 7.0.4, FortiTester 7.4.0 through 7.4.2, FortiTester 7.3 all versions, FortiTester 7.2 all versions, FortiTester 7.1 all versions, FortiTester 7.0 all versions, FortiTester 4.2 all versions, FortiVoice 7.0.0 through 7.0.4, FortiVoice 6.4.0 through 6.4.9, FortiVoice 6.0.7 through 6.0.12, FortiWeb 7.6.0, FortiWeb 7.4.0 through 7.4.4, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions, FortiWeb 6.4 all versions allows attacker to disclose sensitive information via specially crafted packets.
FortiManager >= 7.6.0 <= 7.6.1FortiManager >= 7.4.1 <= 7.4.3FortiOS 7.6.0FortiOS >= 7.4.0 <= 7.4.4FortiOS >= 7.2.0 <= 7.2.8FortiOS >= 7.0.0 <= 7.0.15FortiOS >= 6.4.0 <= 6.4.15FortiOS >= 6.2.0 <= 6.2.17FortiOS >= 6.0.0 <= 6.0.18FortiProxy >= 7.4.0 <= 7.4.4FortiProxy >= 7.2.0 <= 7.2.10FortiProxy >= 7.0.0 <= 7.0.23FortiProxy >= 2.0.0 <= 2.0.14FortiProxy >= 1.2.1 <= 1.2.13FortiProxy 01.02.00FortiProxy >= 1.1.4 <= 1.1.6FortiProxy >= 01.01.00 <= 01.01.03FortiProxy >= 01.00.00 <= 01.00.07FortiWeb 7.6.0FortiWeb >= 7.4.0 <= 7.4.4FortiWeb >= 7.2.0 <= 7.2.13FortiWeb >= 7.0.0 <= 7.0.12FortiWeb >= 6.4.0 <= 6.4.3FortiVoice >= 7.0.0 <= 7.0.4FortiVoice >= 6.4.0 <= 6.4.9FortiVoice >= 6.0.7 <= 6.0.12FortiTester >= 7.4.0 <= 7.4.2FortiTester >= 7.3.0 <= 7.3.2FortiTester >= 7.2.0 <= 7.2.3FortiTester >= 7.1.0 <= 7.1.1FortiTester 7.0.0FortiTester >= 4.2.0 <= 4.2.1FortiPAM >= 1.3.0 <= 1.3.1FortiPAM 1.2.0FortiPAM >= 1.1.0 <= 1.1.2FortiPAM >= 1.0.0 <= 1.0.3FortiNDR >= 7.6.0 <= 7.6.1FortiNDR >= 7.4.0 <= 7.4.8FortiNDR >= 7.2.0 <= 7.2.5FortiNDR >= 7.1.0 <= 7.1.1FortiNDR >= 7.0.0 <= 7.0.7FortiNDR >= 1.5.0 <= 1.5.3FortiMail >= 7.4.0 <= 7.4.2FortiMail >= 7.2.0 <= 7.2.6FortiMail >= 7.0.0 <= 7.0.9FortiRecorder >= 7.2.0 <= 7.2.1FortiRecorder >= 7.0.0 <= 7.0.4fortimanager_cloud >= 7.4.1 <= 7.4.3Upgrade to FortiWeb version 7.6.1 or above Upgrade to FortiWeb version 7.4.5 or above Upgrade to FortiVoice version 7.2.0 or above Upgrade to FortiVoice version 7.0.5 or above Upgrade to FortiVoice version 6.4.10 or above Upgrade to FortiTester version 7.6.0 or above Upgrade to FortiTester version 7.4.3 or above Upgrade to FortiRecorder version 7.2.2 or above Upgrade to FortiRecorder version 7.0.5 or above Upgrade to FortiProxy version 7.4.5 or above Upgrade to FortiProxy version 7.2.11 or above Upgrade to FortiPAM version 1.5.0 or above Upgrade to FortiPAM version 1.4.0 or above Upgrade to FortiOS version 7.6.1 or above Upgrade to FortiOS version 7.4.5 or above Upgrade to FortiOS version 7.2.9 or above Upgrade to FortiOS version 7.0.16 or above Upgrade to FortiOS version 6.4.16 or above Upgrade to FortiNDR version 7.6.2 or above Upgrade to FortiNDR version 7.4.9 or above Upgrade to FortiManager version 7.6.2 or above Upgrade to FortiManager version 7.4.4 or above Upgrade to FortiManager Cloud version 7.4.4 or above Upgrade to FortiMail version 7.6.0 or above Upgrade to FortiMail version 7.4.3 or above Upgrade to FortiMail version 7.2.7 or above
Connected by shared product, vendor, weakness, or advisory.
CVE-2024-50571Medium· 6.5A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through 7.4.5, FortiAnalyzer 7.2.0 through 7.2.9, FortiAnalyzer 7.0.0 through 7.0.13, FortiAnalyzer 6.4 all versions, FortiAnal…
CVE-2024-26011Medium· 5.2A missing authentication for critical function vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.4, FortiManager 7.0.0 through 7.0.11, FortiManager 6.4.0 through 6.4.14, FortiOS 7.4.0 through 7.4.…
CVE-2026-106171Medium· 6.1A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.6, FortiManager Cloud 7.6.2 through 7.6.6 may allow attacker to esc…
CVE-2026-22575Medium· 4.9An improper access control vulnerability in Fortinet FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.10, FortiManager 7.2 all versions, FortiManager Cloud 7.6.2 through 7.6.4, FortiManager Cloud 7.4.1 through 7.4.10, For…
CVE-2024-48884High· 7.5A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3, FortiManager Cloud 7.4.1 through 7.4.3, FortiOS 7.6.0, FortiOS…
CVE-2026-70468High· 8.1A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9, FortiManager Cloud 7.6.1, FortiManager Cloud 7.4.3 through 7.4.5…