Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947)
ProductFortiportal (57fa506a-e494-5ba4-962e-48665ea20724)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-54838 vulnerable 2026-06-08 07:33:13.473389 Details available
MEDIUM (6.4)
An Incorrect Authorization vulnerability [CWE-863] in FortiPortal 7.4.0 through 7.4.5 may allow an authenticated attacker to reboot a shared FortiGate device via crafted HTTP requests.
Published: 2025-12-09T17:18:48.046Z
Updated: 2026-01-14T09:17:55.729Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-46777 vulnerable 2026-06-08 07:27:08.847934 Details available
LOW (2.2)
A insertion of sensitive information into log file in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5, and versions 7.0.0 through 7.0.9 may allow an authenticated attacker with at least read-only admin permissions to view encrypted secrets via the FortiPortal System Log.
Published: 2025-05-28T07:56:03.616Z
Updated: 2025-05-28T13:30:23.832Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24470 vulnerable 2026-06-08 07:12:49.243134 Details available
HIGH (8.1)
An Improper Resolution of Path Equivalence vulnerability [CWE-41] in FortiPortal 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.11 may allow a remote unauthenticated attacker to retrieve source code via crafted HTTP requests.
Published: 2025-02-11T16:08:58.707Z
Updated: 2025-02-11T16:43:10.520Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52967 vulnerable 2026-06-08 06:54:12.077475 Details available
LOW (3.3)
An improper neutralization of script-related html tags in a web page (basic xss) in Fortinet FortiPortal 6.0.0 through 6.0.14 allows attacker to execute unauthorized code or commands via html injection.
Published: 2025-01-14T14:09:44.113Z
Updated: 2025-01-14T20:54:08.452Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45329 vulnerable 2026-06-08 06:48:05.811125 Details available
LOW (3.9)
A authorization bypass through user-controlled key in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5, and versions 7.0.0 through 7.0.8 may allow an authenticated attacker to view unauthorized device information via key modification in API requests.
Published: 2025-06-10T16:36:06.068Z
Updated: 2025-06-10T19:40:21.931Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-40593 vulnerable 2026-06-08 06:43:52.744892 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-40590 vulnerable 2026-06-08 06:43:52.662897 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35278 vulnerable 2026-06-08 06:37:35.775438 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31495 vulnerable 2026-06-08 06:35:31.799156 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26011 vulnerable 2026-06-08 06:31:24.542142 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23105 vulnerable 2026-06-08 06:29:36.254593 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21761 vulnerable 2026-06-08 06:27:36.514698 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21759 vulnerable 2026-06-08 06:27:36.496163 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48791 vulnerable 2026-06-08 06:14:28.068809 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48789 vulnerable 2026-06-08 06:14:28.060333 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48783 vulnerable 2026-06-08 06:14:28.054255 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47543 vulnerable 2026-06-08 06:14:24.939080 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46712 vulnerable 2026-06-08 06:14:22.839344 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41842 vulnerable 2026-06-08 06:11:07.162690 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43954 vulnerable 2026-06-08 05:49:35.066228 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41336 vulnerable 2026-06-08 05:48:30.277562 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27490 vulnerable 2026-06-08 05:41:55.342641 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42757 vulnerable 2026-06-08 05:35:22.876064 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-36181 vulnerable 2026-06-08 05:32:49.873579 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-36176 vulnerable 2026-06-08 05:32:49.860677 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-36174 vulnerable 2026-06-08 05:32:49.857537 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-36172 vulnerable 2026-06-08 05:32:49.844689 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-36171 vulnerable 2026-06-08 05:32:49.844188 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-36168 vulnerable 2026-06-08 05:32:49.835844 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32602 vulnerable 2026-06-08 05:32:07.640668 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32596 vulnerable 2026-06-08 05:32:07.633775 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32595 vulnerable 2026-06-08 05:32:07.633344 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32594 vulnerable 2026-06-08 05:32:07.632909 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32590 vulnerable 2026-06-08 05:32:07.616744 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32589 vulnerable 2026-06-08 05:32:07.616117 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32588 vulnerable 2026-06-08 05:32:07.516128 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26104 vulnerable 2026-06-08 05:30:41.984379 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7731 vulnerable 2026-06-08 05:10:05.967430 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7343 vulnerable 2026-06-08 05:09:55.782668 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7342 vulnerable 2026-06-08 05:09:55.782268 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7340 vulnerable 2026-06-08 05:09:55.780360 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7339 vulnerable 2026-06-08 05:09:55.778895 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7338 vulnerable 2026-06-08 05:09:55.778494 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7337 vulnerable 2026-06-08 05:09:55.778001 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.