FortiPAM vulnerabilities

20 known vulnerabilities in FortiPAM from Fortinet. 19 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  FortiOS: Path Traversal: '../filedir'

  CVE-2026-126255Nov 11, 2026Fortinet

  A path traversal: '../filedir' vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through 7.4.12, FortiOS 7.2.0 through 7.2.13, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, Fort

• 6.5 Medium severity

  Fortinet Multiple Products Path Traversal Exploited

  CVE-2025-61624Apr 14, 2026FortinetEPSS 1.4%

  An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPA

• 8.8 High severity

  FortiPAM: Heap-based Buffer Overflow

  CVE-2025-57740Oct 14, 2025Fortinet

  An Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions; FortiPAM version 1.5.0, version 1.4.2 and below, 1.3 all versions, 1.2 all versions

• 9.8 Critical severity

  FortiPAM: Weak Authentication

  CVE-2025-49201Oct 14, 2025Fortinet

  A weak authentication vulnerability in Fortinet FortiPAM 1.5.0, FortiPAM 1.4.0 through 1.4.2, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiSwitchManager 7.2.0 through 7.2.4 allows attacker to

• 7.5 High severity

  FortiProxy: Improper Validation of Certificate with Host Mismatch

  CVE-2025-25253Oct 14, 2025Fortinet

  An Improper Validation of Certificate with Host Mismatch vulnerability [CWE-297] in FortiProxy version 7.6.1 and below, version 7.4.8 and below, 7.2 all versions, 7.0 all versions and FortiOS version 7.6.2 and below, version 7.4.8 and below, 7.2 all versions,

• 7.2 High severity

  FortiPAM: Heap-based Buffer Overflow

  CVE-2025-22258Oct 14, 2025Fortinet

  A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0 through 1.3.1, 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiProxy 7.6.0 through 7.6.1, 7.4.0 through 7.4.7, FortiOS 7.6.0 through

• 8.1 High severity

  FortiProxy: Authentication Bypass Using an Alternate Path or Channel

  CVE-2024-26009Aug 12, 2025Fortinet

  An authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet FortiOS 6.4.0 through 6.4.15, FortiOS 6.2.0 through 6.2.16, FortiOS 6.0 all versions, FortiPAM 1.2.0, FortiPAM 1.1.0 through 1.1.2, FortiPAM 1.0.0 through 1.0.3, Fo

• 7.2 High severity

  FortiProxy: Double Free

  CVE-2023-45584Aug 12, 2025Fortinet

  A double free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.4.0 through 7.4.1, FortiProxy

• 8.8 High severity

  FortiPAM: Improper Handling of Insufficient Permissions or Privileges

  CVE-2025-22256Jun 10, 2025Fortinet

  A improper handling of insufficient permissions or privileges in Fortinet FortiPAM 1.4.0 through 1.4.1, 1.3.0, 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiSRA 1.4.0 through 1.4.1 allows attacker to improper access control via specially crafted HTTP r

• 7.2 High severity

  FortiPAM: Use of Externally-Controlled Format String

  CVE-2024-45324Mar 11, 2025Fortinet

  A use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.0 through 7.4.4, version 7.2.0 through 7.2.9, version 7.0.0 through 7.0.15 and before 6.4.15, FortiProxy version 7.4.0 through 7.4.6, version 7.2.0 through 7.2.12 and b

• 7.5 High severity

  FortiOS: Out-of-bounds Read

  CVE-2024-46670Jan 14, 2025Fortinet

  An Out-of-bounds Read vulnerability [CWE-125] in FortiOS version 7.6.0, version 7.4.4 and below, version 7.2.9 and below and FortiSASE FortiOS tenant version 24.3.b IPsec IKE service may allow an unauthenticated remote attacker to trigger memory consumption le

• 9.8 Critical severity

  FortiManager: Missing Authentication for Critical Functionality

  CVE-2024-26011Nov 12, 2024Fortinet

  A missing authentication for critical function vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.4, FortiManager 7.0.0 through 7.0.11, FortiManager 6.4.0 through 6.4.14, FortiOS 7.4.0 through 7.4.3, FortiOS 7.2.0 throug

• 8.8 High severity

  An insufficient session expiration vulnerability [CWE-613] vulnerability in FortiOS 7.2.5 and…

  CVE-2022-45862Aug 13, 2024Fortinet

  An insufficient session expiration vulnerability [CWE-613] vulnerability in FortiOS 7.2.5 and below, 7.0 all versions, 6.4 all versions; FortiProxy 7.2 all versions, 7.0 all versions; FortiPAM 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versi

• 7.5 High severity

  FortiOS: Out-of-bounds Write

  CVE-2024-26010Jun 11, 2024Fortinet

  A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.3, FortiOS 7.2.0 through 7.2.7, FortiOS 7.0.0 through 7.0.14, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiPAM 1.2 all versions, FortiPAM 1.

• 7.2 High severity

  FortiOS: Use of Externally-Controlled Format String

  CVE-2023-45583May 14, 2024Fortinet

  A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiPAM 1.1.0, FortiPAM 1.0 all versions, FortiProxy 7.2.0 through

• 9.8 Critical severity

  FortiProxy: Out-of-bounds Write

  CVE-2023-42789Mar 12, 2024FortinetEPSS 3.31%

  A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4.0 through 6.4.14, FortiOS 6.2.0 through 6.2.15, FortiProxy 7.4.0, FortiProxy 7.2.0 through 7.2.6, FortiProxy 7.0

• 8.8 High severity

  FortiOS: Use of Externally-Controlled Format String

  CVE-2023-29181Feb 22, 2024Fortinet

  A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4, FortiOS 7.0.0 through 7.0.11, FortiOS 6.4.0 through 6.4.12, FortiOS 6.2.0 through 6.2.14, FortiOS 6.0.0 through 6.0.16, FortiOS 5.6 all versions, FortiOS 5.4 al

• 9.8 Critical severity

  Fortinet Multiple Products Format String Exploited

  CVE-2024-23113Feb 15, 2024FortinetEPSS 61.7%

  A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, FortiPAM versions 1.2.0, 1.1.0 through

• 8.8 High severity

  FortiOS: Double Free

  CVE-2023-41678Dec 13, 2023FortinetEPSS 1.07%

  A double free in Fortinet FortiOS versions 7.0.0 through 7.0.5, FortiPAM version 1.0.0 through 1.0.3, 1.1.0 through 1.1.1 allows attacker to execute unauthorized code or commands via specifically crafted request.

• 8.8 High severity

  FortiOS: Use of Externally-Controlled Format String

  CVE-2023-36639Dec 13, 2023FortinetEPSS 1.06%

  A use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.4, 7.0.0 through 7.0.10, FortiOS versions 7.4.0, 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.12, 6.2.0 through 6.2.15, 6.0.0 through 6.0.17, FortiPA