FortiIsolator vulnerabilities

4 known vulnerabilities in FortiIsolator from Fortinet. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  An insufficient session expiration vulnerability [CWE-613] and an incorrect authorization…

  CVE-2024-33507Oct 14, 2025Fortinet

  An insufficient session expiration vulnerability [CWE-613] and an incorrect authorization vulnerability [CWE-863] in FortiIsolator 2.4.0 through 2.4.4, 2.3 all versions, 2.2.0, 2.1 all versions, 2.0 all versions authentication mechanism may allow remote unauth

• 7.2 High severity

  FortiIsolator: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-54024Apr 8, 2025FortinetEPSS 1.18%

  An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiIsolator before version 2.4.6 allows a privileged attacker with super-admin profile and CLI access to execute unauthorized cod

• 8.8 High severity

  FortiIsolator: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-55590Mar 11, 2025FortinetEPSS 1.02%

  Multiple improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiIsolator version 2.4.0 through 2.4.5 allows an authenticated attacker with at least read-only admin permission and CLI

• 7.8 High severity

  FortiIsolator: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-22298Oct 10, 2023Fortinet

  A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiIsolator version 1.0.0, FortiIsolator version 1.1.0, FortiIsolator version 1.2.0 through 1.2.2, FortiIsolator version 2.0.0 through 2.0.1, FortiIsolat