CVE-2024-47569: A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6,

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• fortinet fortimail7.0.0 and later · before 7.2.7
• fortinet fortimail7.4.0 and later · before 7.4.3
• fortinet fortimanager7.4.1 and later · before 7.4.4
• fortinet fortimanager7.6.0 and later · before 7.6.2
• fortinet fortimanager cloud7.4.1 and later · before 7.4.4
• fortinet fortindr1.5.0 and later · before 7.4.9
• fortinet fortindr7.6.0 and later · up to 7.6.2 inclusive
• fortinet fortios6.0.0 and later · before 6.4.16
• fortinet fortios7.0.0 and later · before 7.0.16
• fortinet fortios7.2.0 and later · before 7.2.9
• fortinet fortios7.4.0 and later · before 7.4.5
• fortinet fortios7.6.0
• fortinet fortipam1.0.0 and later · up to 1.3.1 inclusive
• fortinet fortiproxy1.0.0 and later · before 7.2.11
• fortinet fortiproxy7.4.0 and later · before 7.4.5
• fortinet fortirecorder7.0.0 and later · before 7.0.5
• fortinet fortirecorder7.2.0 and later · before 7.2.2
• fortinet fortisase24.3.20
• fortinet fortitester4.2.0 and later · before 7.4.3
• fortinet fortivoice6.0.7 and later · before 6.4.10

Versions reported by the vendor

Affected version ranges reported by the assigning authority (fortinet). Independent of NVD's CPE analysis and usually ahead of it.

• Fortinet FortiMail

  • 7.4.0 and later · up to and including 7.4.2affected · semver
  • 7.2.0 and later · up to and including 7.2.6affected · semver
  • 7.0.0 and later · up to and including 7.0.9affected · semver

• Fortinet FortiManager

  • 7.6.0 and later · up to and including 7.6.1affected · semver
  • 7.4.1 and later · up to and including 7.4.3affected · semver

• Fortinet FortiManager Cloud

  • 7.4.1 and later · up to and including 7.4.3affected · semver

• Fortinet FortiNDR

  • 7.6.0 and later · up to and including 7.6.1affected · semver
  • 7.4.0 and later · up to and including 7.4.8affected · semver
  • 7.2.0 and later · up to and including 7.2.5affected · semver
  • 7.1.0 and later · up to and including 7.1.1affected · semver
  • 7.0.0 and later · up to and including 7.0.7affected · semver
  • 1.5.0 and later · up to and including 1.5.3affected · semver

• Fortinet FortiOS

  • 7.6.0affected
  • 7.4.0 and later · up to and including 7.4.4affected · semver
  • 7.2.0 and later · up to and including 7.2.8affected · semver
  • 7.0.0 and later · up to and including 7.0.15affected · semver
  • 6.4.0 and later · up to and including 6.4.15affected · semver
  • 6.2.0 and later · up to and including 6.2.17affected · semver
  • 6.0.0 and later · up to and including 6.0.18affected · semver

• Fortinet FortiPAM

  • 1.2.0affected
  • 1.3.0 and later · up to and including 1.3.1affected · semver
  • 1.1.0 and later · up to and including 1.1.2affected · semver
  • 1.0.0 and later · up to and including 1.0.3affected · semver

• Fortinet FortiProxy

  • 01.02.00affected
  • 7.4.0 and later · up to and including 7.4.4affected · semver
  • 7.2.0 and later · up to and including 7.2.10affected · semver
  • 7.0.0 and later · up to and including 7.0.23affected · semver
  • 2.0.0 and later · up to and including 2.0.14affected · semver
  • 1.2.1 and later · up to and including 1.2.13affected · semver
  • 1.1.4 and later · up to and including 1.1.6affected · semver
  • 01.01.00 and later · up to and including 01.01.03affected · semver
  • 01.00.00 and later · up to and including 01.00.07affected · semver

• Fortinet FortiRecorder

  • 7.2.0 and later · up to and including 7.2.1affected · semver
  • 7.0.0 and later · up to and including 7.0.4affected · semver

• Fortinet FortiTester

  • 7.0.0affected
  • 7.4.0 and later · up to and including 7.4.2affected · semver
  • 7.3.0 and later · up to and including 7.3.2affected · semver
  • 7.2.0 and later · up to and including 7.2.3affected · semver
  • 7.1.0 and later · up to and including 7.1.1affected · semver
  • 4.2.0 and later · up to and including 4.2.1affected · semver

• Fortinet FortiVoice

  • 7.0.0 and later · up to and including 7.0.4affected · semver
  • 6.4.0 and later · up to and including 6.4.9affected · semver
  • 6.0.7 and later · up to and including 6.0.12affected · semver

• Fortinet FortiWeb

  • 7.6.0affected
  • 7.4.0 and later · up to and including 7.4.4affected · semver
  • 7.2.0 and later · up to and including 7.2.13affected · semver
  • 7.0.0 and later · up to and including 7.0.12affected · semver
  • 6.4.0 and later · up to and including 6.4.3affected · semver

Other highest-scoring records for the same primary product.

• CVE-2025-32756A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versionKEV
  78This week
• CVE-2026-104286An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FKEV
  70This week
• CVE-2020-9294An improper authentication vulnerability in FortiMail 5.4.10, 6.0.7, 6.2.2 and earlier and FortiVoiceEntreprise 6.0.0 and 6.0.1 may allow a
  63This week

Published before and after this one in the same product

• ← EarlierCVE-2021-24008Mar 28, 2025 · An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiDDoS version 5.4.0, version 5.
  21Monitor
• ← EarlierCVE-2023-33302Mar 31, 2025 · A buffer copy without checking size of input ('classic buffer overflow') in Fortinet FortiMail webmail and administrative interface version
  35Monitor
• Later →CVE-2025-54972Nov 18, 2025 · An improper neutralization of crlf sequences ('crlf injection') vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3, FortiMail 7.4.0 thr
  17Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.