Skip to content
COOEY

FAIL › dossier

fortimanager

PRODUCT

· dossier confidence 50%

Fortinet's FortiManager product has a concerning history of high-severity vulnerabilities, including zero-day exploits, suggesting potential weaknesses in its development and security processes. These vulnerabilities pose a significant risk to organizations relying on FortiManager for network security management. Improved security practices and proactive vulnerability mitigation are critical.

Failure events
3
Zero-days
1
RCEs
1
On KEV
1
Critical
0
Worst shame
85
PROFILE
CategorycybersecurityWhat they doFortinet FortiManager is a network management platform that centralizes and automates network security operations. It provides a single pane of glass for managing Fortinet and third-party security devices.
SECURITY POSTURE

FortiManager has demonstrated a history of significant vulnerabilities, including zero-day remote code execution and path traversal flaws. These vulnerabilities have been actively exploited, indicating a need for improved security practices.

Notable failures
  • CVE-2024-47575 (RCE0day)
  • CVE-2024-48884 (Path Traversal)
  • CVE-2024-35276 (Buffer Overflow)
Patterns: unauthenticated RCE; path traversal vulnerabilities; buffer overflows
FAILURE HISTORY · 3
DATEEVENTSEVSUMMARY
2024-10-23 CVE-2024-47575 high Fortinet FortiManager allows remote, unauthenticated attackers to execute arbitrary code via a missing authentication flaw in the fgfmd daemon.
2025-01-14 CVE-2024-48884 high A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3, FortiManager Cloud 7.4.1 through 7.4.3, FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.4, FortiOS 7.2.0 through
2025-01-14 CVE-2024-35276 medium A stack-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0.0 through 7.0.12, FortiAnalyzer 6.4.0 through 6.4.14, FortiAnalyzer Cloud 7.4.1 through 7.4.3, FortiAnalyzer Cloud 7.2.1 through 7.2.5,
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-08-03 03:53:17.509814+00:00