Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947)
ProductFortivoice (a311f371-4e64-50e1-800f-e95f5aeab3ee)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-64156 vulnerable 2026-06-08 07:39:18.129404 Details available
MEDIUM (6.8)
An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiVoice 7.2.0 through 7.2.2, FortiVoice 7.0.0 through 7.0.7, FortiVoice 6.4 all versions, FortiVoice 6.0 all versions may allow an authenticated privileged attacker to execute unauthorized code or commands via crafted requests
Published: 2025-12-09T17:18:45.540Z
Updated: 2026-02-26T16:57:01.257Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-60024 vulnerable 2026-06-08 07:37:26.514655 Details available
HIGH (7.7)
Multiple Improper Limitations of a Pathname to a Restricted Directory ('Path Traversal') vulnerabilities [CWE-22] vulnerability in Fortinet FortiVoice 7.2.0 through 7.2.2, FortiVoice 7.0.0 through 7.0.7 may allow a privileged authenticated attacker to write arbitrary files via specifically HTTP or HTTPS commands
Published: 2025-12-09T17:18:44.551Z
Updated: 2026-02-26T16:57:02.128Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58693 vulnerable 2026-06-08 07:35:19.025041 Details available
MEDIUM (5.7)
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiVoice 7.2.0 through 7.2.2, FortiVoice 7.0.0 through 7.0.7 allows a privileged attacker to delete files from the underlying filesystem via crafted HTTP or HTTPs requests.
Published: 2026-01-13T16:32:29.011Z
Updated: 2026-01-14T09:16:23.320Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58692 vulnerable 2026-06-08 07:35:19.016293 Details available
HIGH (7.7)
An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] vulnerability in Fortinet FortiVoice 7.2.0 through 7.2.2, FortiVoice 7.0.0 through 7.0.7 allows an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP or HTTPS requests.
Published: 2025-11-18T17:01:13.626Z
Updated: 2026-02-26T16:21:13.116Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-55717 vulnerable 2026-06-08 07:33:15.310321 Details available
LOW (3.8)
A cleartext storage of sensitive information vulnerability [CWE-312] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.2, FortiMail 7.4.0 through 7.4.4, FortiMail 7.2.0 through 7.2.7, FortiMail 7.0.0 through 7.0.8, FortiRecorder 7.2.0 through 7.2.3, FortiRecorder 7.0 all versions, FortiRecorder 6.4 all versions, FortiVoice 7.2.0, FortiVoice 7.0.0 through 7.0.6 may allow an authenticated malicious administrator to obtain user's secrets via CLI commands. Practical exploitability is limited by conditions out of the control of the attacker: An admin must log in to the targeted device.
Published: 2026-03-10T16:44:08.324Z
Updated: 2026-03-10T20:32:47.413Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47856 vulnerable 2026-06-08 07:27:14.939547 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32756 vulnerable 2026-06-08 07:19:00.835403 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-50565 vulnerable 2026-06-08 06:52:10.834128 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48885 vulnerable 2026-06-08 06:50:11.527768 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48884 vulnerable 2026-06-08 06:50:11.450783 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47569 vulnerable 2026-06-08 06:48:12.839864 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-40588 vulnerable 2026-06-08 06:43:52.660770 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-40587 vulnerable 2026-06-08 06:43:52.561684 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26013 vulnerable 2026-06-08 06:31:24.644777 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23104 vulnerable 2026-06-08 06:29:36.248895 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40720 vulnerable 2026-06-08 06:11:04.412137 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37932 vulnerable 2026-06-08 06:08:16.384779 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37931 vulnerable 2026-06-08 06:08:16.384321 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27488 vulnerable 2026-06-08 05:41:55.330309 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23439 vulnerable 2026-06-08 05:40:57.528488 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42757 vulnerable 2026-06-08 05:35:22.878328 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24008 vulnerable 2026-06-08 05:30:03.459702 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9294 vulnerable 2026-06-08 05:27:21.121225 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.