How many Fortinet FortiManager CVEs are in CISA KEV?

Yes — 2 of Fortinet FortiManager's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of Fortinet FortiManager are affected?

348 distinct Fortinet FortiManager versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Fortinet FortiManager CVEs?

Fortinet FortiManager's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-284 (Improper Access Control).

How many critical Fortinet FortiManager vulnerabilities are there?

Fortinet FortiManager has 14 critical and 39 high-severity CVEs.

What is the average severity of Fortinet FortiManager CVEs?

The average CVSS base score across Fortinet FortiManager's scored CVEs is 6.8.

Fortinet FortiManager Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Fortinet FortiManager vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Fortinet FortiManager Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Fortinet FortiManager has 119 published CVE records since 2005, of which 2 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 6.8.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Fortinet FortiManager, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Fortinet FortiManager's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical14

High39

Medium62

Low4

In CISA’s Known Exploited Vulnerabilities catalog

2 of Fortinet FortiManager's CVEs are confirmed exploited in the wild.

Public exploits

3 of Fortinet FortiManager's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Fortinet FortiManager version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

7.4.02 CVEs
5.0.6 to 5.2.71 CVE
5.4.0 to 5.4.11 CVE
6.21 CVE
6.41 CVE
6.4.121 CVE
7.2.31 CVE

Version ranges

6.4.0 <= v <= 6.4.1526 CVEs
7.4.0 <= v <= 7.4.221 CVEs
7.2.0 <= v <= 7.2.519 CVEs
7.4.0 <= v < 7.4.319 CVEs

Common weakness types

The CWE weakness categories most often found in Fortinet FortiManager CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Fortinet FortiManager CVEs were published each year.

2014

2016

2017

2018

2019

2020

2021

Other Fortinet products

Browse vulnerabilities for other products by Fortinet.

FortiOS283 CVEs FortiProxy131 CVEs FortiWeb127 CVEs FortiAnalyzer95 CVEs forticlient87 CVEs FortiSandbox61 CVEs FortiMail47 CVEs Fortinet FortiOS47 CVEs

Frequently asked questions

Common questions about Fortinet FortiManager vulnerabilities.

How many CVEs does Fortinet FortiManager have?: Fortinet FortiManager has 119 published CVE records since 2005.
How many Fortinet FortiManager CVEs are in CISA KEV?: Yes — 2 of Fortinet FortiManager's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for Fortinet FortiManager vulnerabilities?: Yes — 3 of Fortinet FortiManager's CVEs have a known public exploit.
Which versions of Fortinet FortiManager are affected?: 348 distinct Fortinet FortiManager versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Fortinet FortiManager CVEs?: Fortinet FortiManager's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-284 (Improper Access Control).
How many critical Fortinet FortiManager vulnerabilities are there?: Fortinet FortiManager has 14 critical and 39 high-severity CVEs.
What is the average severity of Fortinet FortiManager CVEs?: The average CVSS base score across Fortinet FortiManager's scored CVEs is 6.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Fortinet FortiManager vulnerabilities

Monitor new Fortinet FortiManager vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing