PT-2025-41919

Name of the Vulnerable Software and Affected Versions Web Server affected versions not specified Description A denial-of-service issue exists due to a high volume of requests sent to the web server. This can lead to a system crash, requiring a power cycle for recovery and webpage utilization. The...

PT-2025-41941

Name of the Vulnerable Software and Affected Versions FortiOS versions 7.4.0 through 7.4.3 and prior to 7.2.7 FortiProxy versions 7.4.0 through 7.4.3 and prior to 7.2.9 FortiPAM versions prior to 1.2.0 FortiSwitchManager versions 7.2.0 through 7.2.3 and 7.0.0 through 7.0.3 Description An improper...

Fortinet FortiVoice 操作系统命令注入漏洞

FortiVoice is Fortinet's all-in-one enterprise voice over IP communications system. A command injection vulnerability exists in the Fortinet FortiVoice operating system that stems from improper neutralization of specific elements. An attacker could exploit this vulnerability to construct a...

PT-2025-41962

Name of the Vulnerable Software and Affected Versions FortiOS versions 7.6.2 and below, 7.4.7 and below, 7.2.10 and below, 7.0 all versions, 6.4 all versions FortiPAM versions 1.5.0, 1.4.2 and below, 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versions FortiProxy versions 7.6.2...

Fortinet FortiSwitchManager和Fortinet FortiPAM 安全漏洞

FortiPAM is Fortinet's privileged access management solution for centralized management of sensitive enterprise credentials. A security vulnerability exists in Fortinet FortiPAM that stems from an insufficiently strong authentication mechanism. An attacker could exploit the vulnerability to execu...

PT-2025-41945

Name of the Vulnerable Software and Affected Versions Fortinet FortiOS versions 6.0.0 through 6.0.12, 6.2.0 through 6.2.17, 6.4.0 through 6.4.15, 7.0.0 through 7.0.16, 7.2.0 through 7.2.10, 7.6.0 through 7.6.1 Fortinet FortiManager versions 6.0.0 through 6.0.12, 6.2.0 through 6.2.13, 6.4.0 throug...

Fortinet Fortigate Heap Overflow in fgfmsd (FG-IR-24-442)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-442 advisory. - A heap-based buffer overflow in Fortinet FortiOS 7.6.0 through 7.6.1, 7.4.0 through 7.4.5, 7.2.0 through 7.2.10, 7.0.0...

FGFM protocol allows unauthenticated reset of the connection

...

PT-2025-41957

Name of the Vulnerable Software and Affected Versions Fortinet FortiAnalyzer versions 7.6.0 through 7.6.3 Fortinet FortiAnalyzer versions prior to 7.4.6 Description An improper authentication issue exists in FortiAnalyzer. An unauthenticated attacker can obtain information about the device’s heal...

Domain fronting protection bypass in explicit web proxy

...

PT-2025-41958

Name of the Vulnerable Software and Affected Versions Fortinet FortiOS versions 7.4.0 through 7.4.1 and versions prior to 7.2.8 Fortinet FortiProxy versions prior to 7.4.8 Description An improper authorization issue exists that allows an authenticated attacker to access static files of other...

Fortinet FortiOS和Fortinet FortiProxy 授权问题漏洞

Fortinet FortiOS is a network operating system developed by Fortinet for use in its firewall and network security appliances. A security vulnerability exists in Fortinet FortiOS that stems from a flaw in the authorization mechanism. An attacker could exploit the vulnerability to access static fil...

Fortinet FortiManager Heap Overflow in fgfmsd (FG-IR-24-442)

The version of FortiManager installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-442 advisory. - A heap-based buffer overflow in Fortinet FortiOS 7.6.0 through 7.6.1, 7.4.0 through 7.4.5, 7.2.0 through 7.2.10, 7.0.0...

Fortinet Fortigate Heap buffer overflow in websocket (FG-IR-24-546)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-546 advisory. - A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0...

Fortinet Fortigate FGFM protocol allows unauthenticated reset of the connection (FG-IR-24-041)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-041 advisory. - An improper check or handling of exceptional conditions vulnerability CWE-703 in FortiOS version 7.4.0 through 7.4.3 and...

Fortinet多款产品 代码问题漏洞

Fortinet FortiOS and others are products of Fortinet, Inc.Fortinet FortiOS is a dedicated security operating system on the FortiGate network security platform.Fortinet FortiProxy is a secure network proxy that protects employees from network attacks by combining a variety of detection technologie...

PT-2025-41956

Name of the Vulnerable Software and Affected Versions Fortinet FortiPAM versions 1.0.0 through 1.5.0 Fortinet FortiSwitchManager versions 7.2.0 through 7.2.4 Description A weak authentication mechanism exists in Fortinet FortiPAM and FortiSwitchManager. This allows an attacker to execute arbitrar...

PT-2025-41946

A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0 through 1.3.1, 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiProxy 7.6.0 through 7.6.1, 7.4.0 through 7.4.7, FortiOS 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0...

SAP S/4HANA 安全漏洞

SAP S/4HANA is an enterprise resource management software based on the SAP HANA in-memory database system from SAP, Germany. A security vulnerability exists in SAP S/4HANA that stems from a lack of authorization checking, which could lead to an attacker removing a sharing rule condition by...

PT-2025-41949

Name of the Vulnerable Software and Affected Versions FortiProxy versions 7.0.1 through 7.0.21 FortiProxy versions 7.2 all versions FortiProxy versions 7.4 all versions FortiProxy versions 7.6.0 through 7.6.3 Description An improperly implemented security check may allow an authenticated proxy us...