FortiSRA vulnerabilities

3 known vulnerabilities in FortiSRA from Fortinet. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  FortiPAM: Heap-based Buffer Overflow

  CVE-2025-22258Oct 14, 2025Fortinet

  A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0 through 1.3.1, 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiProxy 7.6.0 through 7.6.1, 7.4.0 through 7.4.7, FortiOS 7.6.0 through

• 8.8 High severity

  FortiPAM: Improper Handling of Insufficient Permissions or Privileges

  CVE-2025-22256Jun 10, 2025Fortinet

  A improper handling of insufficient permissions or privileges in Fortinet FortiPAM 1.4.0 through 1.4.1, 1.3.0, 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiSRA 1.4.0 through 1.4.1 allows attacker to improper access control via specially crafted HTTP r

• 7.2 High severity

  FortiPAM: Use of Externally-Controlled Format String

  CVE-2024-45324Mar 11, 2025Fortinet

  A use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.0 through 7.4.4, version 7.2.0 through 7.2.9, version 7.0.0 through 7.0.15 and before 6.4.15, FortiProxy version 7.4.0 through 7.4.6, version 7.2.0 through 7.2.12 and b