Approved changes feed: RSS · Atom
cpe:2.3:a:fortinet:fortipam:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Fortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947) |
|---|---|
| Product | Fortipam (105c4bab-6b6c-5719-a11a-2a7d7061380a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-26010 |
vulnerable | 2026-06-08 06:31:24.502121 |
Details available
MEDIUM (6.7)
A stack-based buffer overflow in Fortinet FortiPAM version 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiWeb, FortiAuthenticator, FortiSwitchManager version 7.2.0 through 7.2.3, 7.0.1 through 7.0.3, FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0.0 through 7.0.14, 6.4.0 through 6.4.15, 6.2.0 through 6.2.16, 6.0.0 through 6.0.18, FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through 7.2.9, 7.0.0 through 7.0.15, 2.0.0 through 2.0.13, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7 allows attacker to execute unauthorized code or commands via specially crafted packets.
Published: 2024-06-11T14:32:03.697Z
Updated: 2025-08-27T20:42:53.674Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23113 |
vulnerable | 2026-06-08 06:29:36.324283 |
Details available
CRITICAL (9.8)
A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, FortiPAM versions 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiSwitchManager versions 7.2.0 through 7.2.3, 7.0.0 through 7.0.3 allows attacker to execute unauthorized code or commands via specially crafted packets.
Published: 2024-02-15T13:59:25.313Z
Updated: 2025-10-21T23:05:24.308Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45583 |
vulnerable | 2026-06-08 06:12:42.765617 |
Details available
MEDIUM (6.5)
A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0.0 through 6.0.16, FortiPAM 1.1.0, FortiPAM 1.0 all versions, FortiProxy 7.2.0 through 7.2.5, FortiProxy 7.0.0 through 7.0.11, FortiProxy 2.0 all versions, FortiProxy 1.2 all versions, FortiProxy 1.1 all versions, FortiProxy 1.0 all versions, FortiSwitchManager 7.2.0 through 7.2.2, FortiSwitchManager 7.0.0 through 7.0.2 allows attacker to execute unauthorized code or commands via specially crafted cli commands and http requests.
Published: 2024-05-14T16:19:18.797Z
Updated: 2026-06-12T13:40:04.886Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-42789 |
vulnerable | 2026-06-08 06:11:09.396394 |
Details available
CRITICAL (9.3)
A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4.0 through 6.4.14, FortiOS 6.2.0 through 6.2.15, FortiProxy 7.4.0, FortiProxy 7.2.0 through 7.2.6, FortiProxy 7.0.0 through 7.0.12, FortiProxy 2.0.0 through 2.0.13, FortiSASE 23.2.b allows attacker to execute unauthorized code or commands via specially crafted HTTP requests.
Published: 2024-03-12T15:09:18.416Z
Updated: 2026-07-08T12:43:54.713Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41678 |
vulnerable | 2026-06-08 06:11:06.388006 |
Details available
HIGH (8.3)
A double free in Fortinet FortiOS versions 7.0.0 through 7.0.5, FortiPAM version 1.0.0 through 1.0.3, 1.1.0 through 1.1.1 allows attacker to execute unauthorized code or commands via specifically crafted request.
Published: 2023-12-13T06:44:44.233Z
Updated: 2026-02-25T16:12:50.580Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37934 |
vulnerable | 2026-06-08 06:08:16.422194 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-36640 |
vulnerable | 2026-06-08 06:08:12.798952 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-36639 |
vulnerable | 2026-06-08 06:08:12.780099 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29181 |
vulnerable | 2026-06-08 06:02:39.012214 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45862 |
vulnerable | 2026-06-08 05:50:37.417148 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.