GCVE - cpe:2.3:a:fortinet:fortiportal:7.4.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:fortiportal:7.4.0:*:*:*:*:*:*:*

part: a version: 7.4.0 update: *

Vendor	Fortinet (`2b06c5e0-0a17-54f4-810a-5ef236d51947`)
Product	Fortiportal (`57fa506a-e494-5ba4-962e-48665ea20724`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-49938`	vulnerable	2026-07-29 00:57:45.749503	Details available MEDIUM (6.2) A improper access control vulnerability in Fortinet FortiPortal 7.4.0 through 7.4.7, FortiPortal 7.2.0 through 7.2.8, FortiPortal 7.0 all versions may allow attacker to improper access control via <insert attack vector here> Published: 2026-06-09T14:27:42.914Z Updated: 2026-07-08T12:54:11.690Z Open on db.gcve.eu Reference links https://fortiguard.fortinet.com/psirt/FG-IR-26-140	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-54838`	vulnerable	2026-06-08 07:33:13.469772	Details available MEDIUM (6.4) An Incorrect Authorization vulnerability [CWE-863] in FortiPortal 7.4.0 through 7.4.5 may allow an authenticated attacker to reboot a shared FortiGate device via crafted HTTP requests. Published: 2025-12-09T17:18:48.046Z Updated: 2026-01-14T09:17:55.729Z Open on db.gcve.eu Reference links https://fortiguard.fortinet.com/psirt/FG-IR-25-032	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-46777`	vulnerable	2026-06-08 07:27:08.823943	Details available LOW (2.2) A insertion of sensitive information into log file in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5, and versions 7.0.0 through 7.0.9 may allow an authenticated attacker with at least read-only admin permissions to view encrypted secrets via the FortiPortal System Log. Published: 2025-05-28T07:56:03.616Z Updated: 2025-05-28T13:30:23.832Z Open on db.gcve.eu Reference links https://fortiguard.fortinet.com/psirt/FG-IR-24-380	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-45329`	vulnerable	2026-06-08 06:48:05.793652	Details available LOW (3.9) A authorization bypass through user-controlled key in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5, and versions 7.0.0 through 7.0.8 may allow an authenticated attacker to view unauthorized device information via key modification in API requests. Published: 2025-06-10T16:36:06.068Z Updated: 2025-06-10T19:40:21.931Z Open on db.gcve.eu Reference links https://fortiguard.fortinet.com/psirt/FG-IR-24-274	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-40590`	vulnerable	2026-06-08 06:43:52.663846	Details available MEDIUM (4.4) An improper certificate validation vulnerability [CWE-295] in FortiPortal version 7.4.0, version 7.2.4 and below, version 7.0.8 and below, version 6.0.15 and below when connecting to a FortiManager device, a FortiAnalyzer device, or an SMTP server may allow an unauthenticated attacker in a Man-in-the-Middle position to intercept on and tamper with the encrypted communication channel established between the FortiPortal and those endpoints. Published: 2025-03-14T15:02:47.500Z Updated: 2025-03-14T18:02:38.328Z Open on db.gcve.eu Reference links https://fortiguard.fortinet.com/psirt/FG-IR-22-155	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.