FortiPortal at a glance
- Last 12 months
- 3
- Critical · all time
- 0
- Exploited · all time
- 0
- Public exploit · all time
- 0
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 1 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 2 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 1 | 0 |
| May 2025 | 1 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 1 | 0 |
| Feb 2025 | 1 | 0 |
| Jan 2025 | 3 | 0 |
| Dec 2024 | 0 | 0 |
Latest advisories
-
High max 8.8
OpenSSL: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in OpenSSL ausnutzen, um beliebigen Programmcode auszuführen, einen Denial-of-Service-Zustand zu verursachen oder vertrauliche Informationen offenzulegen.
first Jan 27, 2026 -
High max 6.2NCSC-2026-0197 1 CVE
Kwetsbaarheid verholpen in Fortinet FortiPortal
Fortinet heeft een kwetsbaarheid verholpen in FortiPortal versies 7.0 tot en met 7.4.7.
-
Medium max 6.2WID-SEC-2026-1838 1 CVE
Fortinet FortiPortal: Schwachstelle ermöglicht Offenlegung von Informationen
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Fortinet FortiPortal ausnutzen, um Informationen offenzulegen.
-
Medium max 5.9WID-SEC-2025-2786 1 CVE
Mehrere Fortinet Produkte: Schwachstelle ermöglicht Offenlegung von Informationen
Ein lokaler Angreifer kann eine Schwachstelle in Fortinet FortiAnalyzer, Fortinet FortiManager und Fortinet FortiOS ausnutzen, um Informationen offenzulegen.
-
Medium max 6.4WID-SEC-2025-2790 1 CVE
Fortinet FortiPortal: Schwachstelle ermöglicht Denial of Service
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Fortinet FortiPortal ausnutzen, um einen Denial of Service Angriff durchzuführen.
25 results · Feed
-
Medium 6.2
A improper access control vulnerability in Fortinet FortiPortal 7.4.0 through 7.4.7, FortiPortal 7.2.0 through 7.2.8, F…
-
Medium 5.9
A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2, FortiAnalyzer 7.2.0 through 7.2.5,…
-
Medium 6.4
An Incorrect Authorization vulnerability [CWE-863] in FortiPortal 7.4.0 through 7.4.5 may allow an authenticated attack…
-
Low 3.9
A authorization bypass through user-controlled key in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5…
-
Low 2.2
A insertion of sensitive information into log file in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5…
-
Medium 4.4
An improper certificate validation vulnerability [CWE-295] in FortiPortal version 7.4.0, version 7.2.4 and below, versi…
-
High 8.1
An Improper Resolution of Path Equivalence vulnerability [CWE-41] in FortiPortal 7.4.0 through 7.4.2, 7.2.0 through 7.2…
-
Medium 4.1
A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison w…
-
Medium 4.1
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiPortal versions…
-
Low 3.3
An improper neutralization of script-related html tags in a web page (basic xss) in Fortinet FortiPortal 6.0.0 through …
-
Medium 5.2
A missing authentication for critical function vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager…
-
Medium 5.1
An authorization bypass through user-controlled key vulnerability [CWE-639] in Fortinet FortiPortal version 7.0.0 throu…
-
Low 3.9
An authorization bypass through user-controlled key in Fortinet FortiPortal version 7.2.0, and versions 7.0.0 through 7…
-
Low 3.9
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiPortal versions…
-
Medium 4.1
A client-side enforcement of server-side security in Fortinet FortiPortal version 6.0.0 through 6.0.14 allows attacker …
-
High 7.1
A Use Of Less Trusted Source [CWE-348] vulnerability in Fortinet FortiPortal version 7.0.0 through 7.0.6 and version 7.…
-
Medium 6.3
A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet allows a privileged atta…
-
Low 3.9
An improper authorization vulnerability [CWE-285] in FortiPortal version 7.2.0, and versions 7.0.6 and below reports ma…
-
Medium 4.9CVE-2023-48783 EPSS 22%
An Authorization Bypass Through User-Controlled Key vulnerability [CWE-639] affecting PortiPortal version 7.2.1 and bel…
-
Medium 6.3
A improper access control in Fortinet FortiPortal version 7.0.0 through 7.0.6, Fortinet FortiPortal version 7.2.0 throu…
-
High 7.9
An improper neutralization of special elements used in a command ('Command Injection') vulnerability [CWE-77] in FortiP…
-
Medium 5.1
A exposure of sensitive information to an unauthorized actor in Fortinet FortiManager version 6.0.0 through 6.0.4, Fort…
-
Medium 4.1
An insertion of sensitive information into log file vulnerability [CWE-532] in the FortiPortal management interface 7.0…
-
Medium 6.6
An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiPortal versions 6.0.0 thr…
-
Medium 6.3
A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may all…