FAIL › dossier
fortiproxy
PRODUCT· dossier confidence 20%
Fortinet is a public cybersecurity company with a documented history of critical and high-severity vulnerabilities in its FortiOS and related products, including authentication bypasses and memory corruption flaws. The company's security posture is compromised by a pattern of repeated critical CVEs affecting multiple product lines and versions.
PROFILE
CategorycybersecurityWhat they doFortinet provides network security solutions including firewalls, intrusion prevention, and secure web gateways.
Websitehttps://www.fortinet.com ↗
SECURITY POSTURE
Fortinet has a poor security posture with a history of critical and high-severity vulnerabilities across multiple product lines, including authentication bypasses, out-of-bounds writes, and heap-based buffer overflows.
Notable failures
- CVE-2024-55591: Authentication bypass in FortiOS/FortiProxy
- CVE-2023-42789: Out-of-bounds write in FortiOS
- CVE-2024-48884: Path traversal in FortiManager
Patterns: repeated critical vulnerabilities in FortiOS across multiple versions; authentication bypasses and out-of-bounds writes affecting multiple product lines
FAILURE HISTORY · 6
| DATE | EVENT | SEV | SUMMARY |
|---|---|---|---|
| 2025-01-14 | CVE-2024-55591 | critical | An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 through 7.0.16 and FortiProxy version 7.0.0 through 7.0.19 and 7.2.0 through 7.2.12 allows a remote attacker to gain super-admin privileges via crafted requests to |
| 2024-03-12 | CVE-2023-42789 | critical | A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4.0 through 6.4.14, FortiOS 6.2.0 through 6.2.15, FortiProxy 7.4.0, FortiProxy 7.2.0 through 7.2.6, FortiProxy 7.0.0 through 7.0.12, F |
| 2025-01-14 | CVE-2024-48884 | high | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3, FortiManager Cloud 7.4.1 through 7.4.3, FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.4, FortiOS 7.2.0 through |
| 2024-02-09 | CVE-2024-21762 | critical | CVE-2024-21762: A out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 th |
| 2023-06-13 | CVE-2023-27997 | critical | CVE-2023-27997: A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 an |
| 2022-10-18 | CVE-2022-40684 | critical | CVE-2022-40684: An authentication bypass using an alternate path or channel [CWE-288] in Fortine |
DOSSIER SOURCES
- Fortinet (FTNT) Company Headquarters - financecharts.com · www.financecharts.com
- Fortinet, Inc. (FTNT, US34959E1091) - Company Profile · financialdata.net
- Fortinet (FTNT) Company Profile, History, Products & Services · www.financecharts.com
Open questions: Fortinet's corporate headquarters location · Fortinet's founding year · Fortinet's organizational size · Fortinet's ownership structure · Fortinet's official website URL
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-09-20 04:21:43.760726+00:00