GCVE - cpe:2.3:a:fortinet:fortisoar:7.2.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:fortisoar:7.2.2:*:*:*:*:*:*:*

part: a version: 7.2.2 update: *

Vendor	Fortinet (`2b06c5e0-0a17-54f4-810a-5ef236d51947`)
Product	Fortisoar (`9a1c7a6a-0e0a-5329-be5f-750e33c067e8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-32932`	vulnerable	2026-06-08 07:19:01.210636	Details available MEDIUM (6.2) An Improper neutralization of input during web page generation ('cross-site scripting') vulnerability [CWE-79] in FortiSOAR version 7.6.1 and below, version 7.5.1 and below, 7.4 all versions, 7.3 all versions, 7.2 all versions, 7.0 all versions, 6.4 all versions WEB UI may allow an authenticated remote attacker to perform an XSS attack via stored malicious service requests Published: 2025-08-12T19:00:01.506Z Updated: 2025-08-13T20:13:36.224Z Open on db.gcve.eu Reference links https://fortiguard.fortinet.com/psirt/FG-IR-24-513	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-48893`	vulnerable	2026-06-08 06:50:11.649372	Details available MEDIUM (6.4) An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiSOAR 7.3.0 through 7.3.3, 7.2.1 through 7.2.2 may allow an authenticated attacker to perform a stored cross site scripting (XSS) attack via the creation of malicious playbook. Published: 2025-01-14T14:08:29.839Z Updated: 2025-01-14T20:57:27.993Z Open on db.gcve.eu Reference links https://fortiguard.fortinet.com/psirt/FG-IR-24-405	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-47572`	vulnerable	2026-06-08 06:48:12.861949	Details available HIGH (8.3) An improper neutralization of formula elements in a csv file in Fortinet FortiSOAR 7.2.1 through 7.4.1 allows attacker to execute unauthorized code or commands via manipulating csv file Published: 2025-01-14T14:09:59.359Z Updated: 2025-02-18T21:36:45.163Z Open on db.gcve.eu Reference links https://fortiguard.fortinet.com/psirt/FG-IR-24-210	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-45327`	vulnerable	2026-06-08 06:48:05.777114	Details available HIGH (7.1) An improper authorization vulnerability [CWE-285] in FortiSOAR version 7.4.0 through 7.4.3, 7.3.0 through 7.3.2, 7.2.0 through 7.2.2, 7.0.0 through 7.0.3 change password endpoint may allow an authenticated attacker to perform a brute force attack on users and administrators password via crafted HTTP requests. Published: 2024-09-11T09:53:46.087Z Updated: 2024-09-12T03:55:24.954Z Open on db.gcve.eu Reference links https://fortiguard.fortinet.com/psirt/FG-IR-24-048	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-36510`	vulnerable	2026-06-08 06:39:45.356137	Details available MEDIUM (4.9) An observable response discrepancy vulnerability [CWE-204] in FortiClientEMS 7.4.0, 7.2.0 through 7.2.4, 7.0 all versions, and FortiSOAR 7.5.0, 7.4.0 through 7.4.4, 7.3.0 through 7.3.2, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an unauthenticated attacker to enumerate valid users via observing login request responses. Published: 2025-01-14T14:09:49.286Z Updated: 2025-01-15T14:51:13.708Z Open on db.gcve.eu Reference links https://fortiguard.fortinet.com/psirt/FG-IR-24-071	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-21760`	vulnerable	2026-06-08 06:27:36.503527	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.