A stack-based buffer overflow in Fortinet FortiPAM version 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiWeb, FortiAuthenticator, Fo

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• fortinet fortios6.0.0 and later · before 7.0.15
• fortinet fortios7.2.0 and later · before 7.2.8
• fortinet fortios7.4.0 and later · before 7.4.4

Versions reported by the vendor

Affected version ranges reported by the assigning authority (fortinet). Independent of NVD's CPE analysis and usually ahead of it.

• Fortinet FortiOS

  • 7.4.0 and later · up to and including 7.4.3affected · semver
  • 7.2.0 and later · up to and including 7.2.7affected · semver
  • 7.0.0 and later · up to and including 7.0.14affected · semver
  • 6.4.0 and later · up to and including 6.4.15affected · semver
  • 6.2.0 and later · up to and including 6.2.16affected · semver
  • 6.0.0 and later · up to and including 6.0.18affected · semver

• Fortinet FortiPAM

  • 1.2.0affected
  • 1.1.0 and later · up to and including 1.1.2affected · semver
  • 1.0.0 and later · up to and including 1.0.3affected · semver

• Fortinet FortiProxy

  • 7.4.0 and later · up to and including 7.4.2affected · semver
  • 7.2.0 and later · up to and including 7.2.9affected · semver
  • 7.0.0 and later · up to and including 7.0.15affected · semver
  • 2.0.0 and later · up to and including 2.0.13affected · semver
  • 1.2.0 and later · up to and including 1.2.13affected · semver
  • 1.1.0 and later · up to and including 1.1.6affected · semver
  • 1.0.0 and later · up to and including 1.0.7affected · semver

• Fortinet FortiSwitchManager

  • 7.2.0 and later · up to and including 7.2.3affected · semver
  • 7.0.1 and later · up to and including 7.0.3affected · semver

Other highest-scoring records for the same primary product.

• CVE-2022-42475A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.KEV
  99Now
• CVE-2020-12812An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below may result in a user being able to logKEV
  84Now
• CVE-2025-25249A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.1KEV
  70This week
• CVE-2025-68686An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1,KEV
  62This week
• CVE-2019-5591A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept sensitive informationKEV
  62This week
• CVE-2022-41328A improper limitation of a pathname to a restricted directory vulnerability ('path traversal') [CWE-22] in Fortinet FortiOS version 7.2.0 thKEV
  61This week

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.

MITRE has no CAPEC/ATT&CK mapping for this CWE.