https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-49784.htmlhttps://patchthecve.com/cve/CVE-2025-49784.htmlWed, 17 Jun 2026 09:31:55 +0000MEDIUM 6.0: An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiAnalyzer-BigDathttps://patchthecve.com/cve/CVE-2024-33501.htmlhttps://patchthecve.com/cve/CVE-2024-33501.htmlWed, 17 Jun 2026 07:31:52 +0000MEDIUM 4.2: Two improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5, FortiManager version 7.4.0 through 7.4.2 and before 7.2.5 and FortiAnalyzer-BigData version 7.4.0 and before 7.2.7 ahttps://patchthecve.com/cve/CVE-2024-32123.htmlhttps://patchthecve.com/cve/CVE-2024-32123.htmlWed, 17 Jun 2026 07:29:19 +0000MEDIUM 6.7: Multiple improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiManager, FortiAnalyzer versions 7.4.0 through 7.4.2 7.2.0 through 7.2.5 and 7.0.0 through 7.0.12 and 6.4.0 through 6.4.14 and 6.2.0 through 6.2.12 and 6.0.0 through 6.0.12 and 5.6.0 https://patchthecve.com/cve/CVE-2024-40584.htmlhttps://patchthecve.com/cve/CVE-2024-40584.htmlWed, 17 Jun 2026 07:46:07 +0000HIGH 7.2: An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiAnalyzer version 7.4.0 through 7.4.3, 7.2.0 through 7.2.5, 7.0.0 through 7.0.13, 6.4.0 through 6.4.15 and 6.2.2 through 6.2.13, Fortinet FortiManager version 7.4.0 thhttps://patchthecve.com/cve/CVE-2024-35274.htmlhttps://patchthecve.com/cve/CVE-2024-35274.htmlWed, 17 Jun 2026 07:34:39 +0000LOW 2.3: An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiAnalyzer versions below 7.4.2, Fortinet FortiManager versions below 7.4.2 and Fortinet FortiAnalyzer-BigData version 7.4.0 and below 7.2.7 allows a privileged attacker with read https://patchthecve.com/cve/CVE-2024-32118.htmlhttps://patchthecve.com/cve/CVE-2024-32118.htmlWed, 17 Jun 2026 07:29:18 +0000MEDIUM 6.7: Multiple improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, Fortinet FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5 and Fortinet FortiAnalyzer-BigData bhttps://patchthecve.com/cve/CVE-2024-32117.htmlhttps://patchthecve.com/cve/CVE-2024-32117.htmlWed, 17 Jun 2026 07:29:18 +0000MEDIUM 4.9: An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiManager version 7.4.0 through 7.4.2 and below 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.2 and below 7.2.5 & FortiAnalyzer-BigData version 7.4.0 and below 7.2.7 allows a privhttps://patchthecve.com/cve/CVE-2024-32116.htmlhttps://patchthecve.com/cve/CVE-2024-32116.htmlWed, 17 Jun 2026 07:29:18 +0000MEDIUM 5.1: Multiple relative path traversal vulnerabilities [CWE-23] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5 and FortiAnalyzer-BigData version 7.4.0 and before 7.2.7 allows a privileged attacker to delete files from the uhttps://patchthecve.com/cve/CVE-2024-31496.htmlhttps://patchthecve.com/cve/CVE-2024-31496.htmlWed, 17 Jun 2026 07:28:32 +0000MEDIUM 6.7: A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5 and FortiAnalyzer-BigData 7.4.0 and before 7.2.7 allows a privileged attacker to execute unauthorized code or commanhttps://patchthecve.com/cve/CVE-2024-23666.htmlhttps://patchthecve.com/cve/CVE-2024-23666.htmlWed, 17 Jun 2026 07:13:20 +0000HIGH 7.5: A client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigData at least version 7.4.0 and 7.2.0 through 7.2.6 and 7.0.1 through 7.0.6 and 6.4.5 through 6.4.7 and 6.2.5, FortiManager version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.4 and 7.0.0 through 7.0.11 and 6.4.0 through https://patchthecve.com/cve/CVE-2023-44255.htmlhttps://patchthecve.com/cve/CVE-2023-44255.htmlWed, 17 Jun 2026 06:27:13 +0000MEDIUM 4.1: An exposure of sensitive information to an unauthorized actor [CWE-200] in Fortinet FortiManager before 7.4.2, FortiAnalyzer before 7.4.2 and FortiAnalyzer-BigData before 7.2.5 may allow a privileged attacker with administrative read permissions to read event logs of another adom via crafted HTTP orhttps://patchthecve.com/cve/CVE-2023-44254.htmlhttps://patchthecve.com/cve/CVE-2023-44254.htmlWed, 17 Jun 2026 06:27:13 +0000MEDIUM 5.0: An authorization bypass through user-controlled key [CWE-639] vulnerability in FortiAnalyzer version 7.4.1 and before 7.2.5 and FortiManager version 7.4.1 and before 7.2.5 may allow a remote attacker with low privileges to read sensitive data via a crafted HTTP request.https://patchthecve.com/cve/CVE-2023-41842.htmlhttps://patchthecve.com/cve/CVE-2023-41842.htmlWed, 17 Jun 2026 06:22:54 +0000MEDIUM 6.7: A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet allows a privileged attacker to execute unauthorized code or commands via specially crafted command arguments.