PatchTheCVEfortianalyzer big data vulnerabilities and fixes
Recent CVEs affecting fortianalyzer big data, with upgrade or downgrade steps. 12 tracked.
Also searched as: fortianalyzerbigdata.
fortianalyzer big data has 12 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 12. Most recent: 2026-03-10. Highest priority: CVE-2024-23666 (score 48/100).
- CVE-2025-49784 MEDIUM 6.0 UPGRADE UPGRADE An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Forti
- CVE-2024-40584 HIGH 7.2 UPGRADE UPGRADE An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [C
- CVE-2024-35274 LOW 2.3 UPGRADE UPGRADE An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fo
- CVE-2024-33501 MEDIUM 4.2 UPGRADE UPGRADE Two improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89
- CVE-2024-32123 MEDIUM 6.7 UPGRADE UPGRADE Multiple improper neutralization of special elements used in an os command ('os command injection') in Fortine
- CVE-2024-32118 MEDIUM 6.7 UPGRADE UPGRADE Multiple improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabil
- CVE-2024-32117 MEDIUM 4.9 UPGRADE UPGRADE An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fo
- CVE-2024-32116 MEDIUM 5.1 UPGRADE UPGRADE Multiple relative path traversal vulnerabilities [CWE-23] in Fortinet FortiManager version 7.4.0 through 7.4.2
- CVE-2024-31496 MEDIUM 6.7 UPGRADE UPGRADE A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiManager version 7.4.0 through 7.4.2 and
- CVE-2024-23666 HIGH 7.5 UPGRADE UPGRADE A client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigData at least version 7.4.0 a
- CVE-2023-44255 MEDIUM 4.1 UPGRADE UPGRADE An exposure of sensitive information to an unauthorized actor [CWE-200] in Fortinet FortiManager before 7.4.2,
- CVE-2023-44254 MEDIUM 5.0 UPGRADE UPGRADE An authorization bypass through user-controlled key [CWE-639] vulnerability in FortiAnalyzer version 7.4.1 and
FAQ
How do I fix fortianalyzer big data vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is fortianalyzer big data being exploited right now?
None of the tracked fortianalyzer big data CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which fortianalyzer big data CVE should I patch first?
CVE-2024-23666 currently ranks highest (48/100): A client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigData at least version 7.4.0 a.