Fortinet FortiSRA 1.4.1
Approved changes feed: RSS · Atom
cpe:2.3:a:fortinet:fortisra:1.4.1:*:*:*:*:*:*:*
part: a version: 1.4.1 update: *
| Vendor | Fortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947) |
|---|---|
| Product | Fortisra (b78be312-085c-51ac-99b0-011b72e07bce) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-22258 |
vulnerable | 2026-06-08 07:10:52.702674 |
Details available
MEDIUM (5.7)
A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0 through 1.3.1, 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiProxy 7.6.0 through 7.6.1, 7.4.0 through 7.4.7, FortiOS 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.2 through 7.0.16, FortiSwitchManager 7.2.1 through 7.2.5 allows attackers to escalate their privilege via specially crafted http requests.
Published: 2025-10-14T15:22:56.720Z
Updated: 2026-02-26T17:47:34.153Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-22256 |
vulnerable | 2026-06-08 07:10:52.680723 |
Details available
MEDIUM (6)
A improper handling of insufficient permissions or privileges in Fortinet FortiPAM 1.4.0 through 1.4.1, 1.3.0, 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiSRA 1.4.0 through 1.4.1 allows attacker to improper access control via specially crafted HTTP requests
Published: 2025-06-10T16:36:15.866Z
Updated: 2025-06-10T19:39:51.038Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47570 |
vulnerable | 2026-06-08 06:48:12.846884 |
Details available
MEDIUM (6.3)
An insertion of sensitive information into log file vulnerability [CWE-532] in FortiOS 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0 all versions; FortiProxy 7.4.0 through 7.4.3, 7.2.0 through 7.2.11; FortiPAM 1.4 all versions, 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versions and FortiSRA 1.4 all versions may allow a read-only administrator to retrieve API tokens of other administrators via observing REST API logs, if REST API logging is enabled (non-default configuration).
Published: 2025-12-09T17:20:42.499Z
Updated: 2026-02-26T16:56:58.331Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45324 |
vulnerable | 2026-06-08 06:45:55.968001 |
Details available
HIGH (7)
A use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.0 through 7.4.4, version 7.2.0 through 7.2.9, version 7.0.0 through 7.0.15 and before 6.4.15, FortiProxy version 7.4.0 through 7.4.6, version 7.2.0 through 7.2.12 and before 7.0.19, FortiPAM version 1.4.0 through 1.4.2 and before 1.3.1, FortiSRA version 1.4.0 through 1.4.2 and before 1.3.1 and FortiWeb version 7.4.0 through 7.4.5, version 7.2.0 through 7.2.10 and before 7.0.10 allows a privileged attacker to execute unauthorized code or commands via specially crafted HTTP or HTTPS commands.
Published: 2025-03-11T14:54:33.810Z
Updated: 2026-02-26T19:09:40.968Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.