FortiPortal

16 results · Clear filters · Feed

• Medium 6.2
  CVE-2026-49938

  A improper access control vulnerability in Fortinet FortiPortal 7.4.0 through 7.4.7, FortiPortal 7.2.0 through 7.2.8, F…

  Fortinet FortiPortal Network devices
  Jun 9, 2026
• Medium 5.9
  CVE-2024-40593

  A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2, FortiAnalyzer 7.2.0 through 7.2.5,…

  Fortinet FortiOS FortiManager FortiAnalyzer Network devices
  Dec 11, 2025
• Medium 6.4
  CVE-2025-54838

  An Incorrect Authorization vulnerability [CWE-863] in FortiPortal 7.4.0 through 7.4.5 may allow an authenticated attack…

  Fortinet FortiPortal Network devices
  Dec 9, 2025
• Medium 4.4
  CVE-2024-40590

  An improper certificate validation vulnerability [CWE-295] in FortiPortal version 7.4.0, version 7.2.4 and below, versi…

  Fortinet FortiPortal Network devices
  Mar 14, 2025
• Medium 4.1
  CVE-2022-23439

  A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison w…

  Fortinet FortiOS FortiManager FortiProxy Network devices
  Jan 22, 2025
• Medium 4.1
  CVE-2024-35278

  A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiPortal versions…

  Fortinet FortiPortal Network devices
  Jan 14, 2025
• Medium 5.2
  CVE-2024-26011

  A missing authentication for critical function vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager…

  Fortinet FortiOS FortiManager FortiProxy Network devices
  Nov 12, 2024
• Medium 5.1
  CVE-2023-47543

  An authorization bypass through user-controlled key vulnerability [CWE-639] in Fortinet FortiPortal version 7.0.0 throu…

  Fortinet FortiPortal Network devices
  Nov 12, 2024
• Medium 4.1
  CVE-2023-48789

  A client-side enforcement of server-side security in Fortinet FortiPortal version 6.0.0 through 6.0.14 allows attacker …

  Fortinet FortiPortal Network devices
  Jun 3, 2024
• Medium 6.3
  CVE-2023-41842

  A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet allows a privileged atta…

  Fortinet FortiManager FortiAnalyzer FortiPortal Network devices
  Mar 12, 2024
• Medium 4.9
  CVE-2023-48783 EPSS 22%

  An Authorization Bypass Through User-Controlled Key vulnerability [CWE-639] affecting PortiPortal version 7.2.1 and bel…

  Fortinet FortiPortal Network devices
  Jan 10, 2024
• Medium 6.3
  CVE-2023-46712

  A improper access control in Fortinet FortiPortal version 7.0.0 through 7.0.6, Fortinet FortiPortal version 7.2.0 throu…

  Fortinet FortiPortal Network devices
  Jan 10, 2024
• Medium 5.1
  CVE-2022-27490

  A exposure of sensitive information to an unauthorized actor in Fortinet FortiManager version 6.0.0 through 6.0.4, Fort…

  Fortinet FortiManager FortiAnalyzer FortiPortal Network devices
  Mar 7, 2023
• Medium 4.1
  CVE-2022-43954

  An insertion of sensitive information into log file vulnerability [CWE-532] in the FortiPortal management interface 7.0…

  Fortinet FortiPortal Network devices
  Feb 16, 2023
• Medium 6.6
  CVE-2022-41336

  An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiPortal versions 6.0.0 thr…

  Fortinet FortiPortal Network devices
  Jan 3, 2023
• Medium 6.3
  CVE-2021-42757

  A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may all…

  Fortinet FortiOS FortiManager FortiProxy Network devices
  Dec 8, 2021