GCVE - cpe:2.3:a:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*

part: a version: 7.4.0 update: *

Vendor	Fortinet (`2b06c5e0-0a17-54f4-810a-5ef236d51947`)
Product	Fortimanager (`093c7bb2-b519-59b3-baba-ea03ca132751`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-47571`	vulnerable	2026-06-08 06:48:12.861421	Details available HIGH (7.9) An operation on a resource after expiration or release in Fortinet FortiManager 6.4.12 through 7.4.0 allows an attacker to gain improper access to FortiGate via valid credentials. Published: 2025-01-14T14:10:00.156Z Updated: 2025-02-18T21:36:03.768Z Open on db.gcve.eu Reference links https://fortiguard.fortinet.com/psirt/FG-IR-24-239	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-40585`	vulnerable	2026-06-08 06:43:52.525158	Details available MEDIUM (5.9) An insertion of sensitive information into log file vulnerabilities [CWE-532] in FortiManager version 7.4.0, version 7.2.3 and below, version 7.0.8 and below, version 6.4.12 and below, version 6.2.11 and below and FortiAnalyzer version 7.4.0, version 7.2.3 and below, version 7.0.8 and below, version 6.4.12 and below, version 6.2.11 and below eventlog may allow any low privileged user with access to event log section to retrieve certificate private key and encrypted password logged as system log. Published: 2025-03-14T15:45:46.084Z Updated: 2025-03-14T17:48:37.323Z Open on db.gcve.eu Reference links https://fortiguard.fortinet.com/psirt/FG-IR-24-311	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-44256`	vulnerable	2026-06-08 06:12:39.839743	Details available MEDIUM (6.4) A server-side request forgery vulnerability [CWE-918] in Fortinet FortiAnalyzer version 7.4.0, version 7.2.0 through 7.2.3 and before 7.0.8 and FortiManager version 7.4.0, version 7.2.0 through 7.2.3 and before 7.0.8 allows a remote attacker with low privileges to view sensitive data from internal servers or perform a local port scan via a crafted HTTP request. Published: 2023-10-20T09:04:52.906Z Updated: 2024-09-12T14:30:39.261Z Open on db.gcve.eu Reference links https://fortiguard.com/psirt/FG-IR-19-039 https://github.com/orangecertcc/security-research/security/advisories/GHSA-2hc5-p5mc-8vrh	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-44254`	vulnerable	2026-06-08 06:12:39.806287	Details available MEDIUM (4.7) An authorization bypass through user-controlled key [CWE-639] vulnerability in FortiAnalyzer version 7.4.1 and before 7.2.5 and FortiManager version 7.4.1 and before 7.2.5 may allow a remote attacker with low privileges to read sensitive data via a crafted HTTP request. Published: 2024-09-10T14:37:45.294Z Updated: 2024-09-10T17:13:19.223Z Open on db.gcve.eu Reference links https://fortiguard.com/psirt/FG-IR-23-204	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-44253`	vulnerable	2026-06-08 06:12:39.725476	Details available MEDIUM (4.7) An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiManager version 7.4.0 through 7.4.1 and before 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.1 and before 7.2.5 and FortiAnalyzer-BigData before 7.2.5 allows an adom administrator to enumerate other adoms and device names via crafted HTTP or HTTPS requests. Published: 2024-02-15T13:59:24.262Z Updated: 2025-02-13T17:13:34.431Z Open on db.gcve.eu Reference links https://fortiguard.com/psirt/FG-IR-23-268 https://github.com/orangecertcc/security-research/security/advisories/GHSA-25j8-69h7-83h2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-44249`	vulnerable	2026-06-08 06:12:39.707622	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-42791`	vulnerable	2026-06-08 06:11:09.424584	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-42788`	vulnerable	2026-06-08 06:11:09.395348	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-42787`	vulnerable	2026-06-08 06:11:09.394600	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-41838`	vulnerable	2026-06-08 06:11:07.152369	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-40719`	vulnerable	2026-06-08 06:11:04.407735	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-36554`	vulnerable	2026-06-08 06:08:12.271802	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.