Fortinet FortiPortal vulnerabilities

CVEs per yearBy the year they were published

1. 20211
2. 20234
3. 202410
4. 20259
5. 20261

Newest CVEs

• CVE-2026-49938

  A improper access control vulnerability in Fortinet FortiPortal 7.4.0 through 7.4.7, FortiPortal 7.2.0 through 7.2.8, FortiPortal 7.0 all versions may allow…

  Fortinet · FortiPortal

  Medium6.2
• CVE-2024-40593

  A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0 all versions,…

  Fortinet · FortiAnalyzer

  Medium5.9
• CVE-2025-54838

  An Incorrect Authorization vulnerability [CWE-863] in FortiPortal 7.4.0 through 7.4.5 may allow an authenticated attacker to reboot a shared FortiGate device…

  Fortinet · FortiPortal

  Medium6.4
• CVE-2024-45329

  A authorization bypass through user-controlled key in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5, and versions 7.0.0 through 7.0.8 may…

  Fortinet · FortiPortal

  Low3.9
• CVE-2025-46777

  A insertion of sensitive information into log file in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5, and versions 7.0.0 through 7.0.9 may…

  Fortinet · FortiPortal

  Low2.2
• CVE-2024-40590

  An improper certificate validation vulnerability [CWE-295] in FortiPortal version 7.4.0, version 7.2.4 and below, version 7.0.8 and below, version 6.0.15 and…

  Fortinet · FortiPortal

  Medium4.4
• CVE-2025-24470

  An Improper Resolution of Path Equivalence vulnerability [CWE-41] in FortiPortal 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.11 may allow a…

  Fortinet · FortiPortal

  High8.1
• CVE-2022-23439

  A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests,…

  Fortinet · FortiTester

  Medium4.1
• CVE-2024-35278

  A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiPortal versions 7.2.4 through 7.2.0 and 7.0.0 through…

  Fortinet · FortiPortal

  Medium4.1
• CVE-2024-52967

  An improper neutralization of script-related html tags in a web page (basic xss) in Fortinet FortiPortal 6.0.0 through 6.0.14 allows attacker to execute…

  Fortinet · FortiPortal

  Low3.3