# Fortinet Fortimanager


- [CVE-2024-47575](https://insights.sbomify.com/CVE-2024-47575/): Fortinet FortiManager Missing Authentication (critical 9.8, exploited in the wild)
- [CVE-2026-24858](https://insights.sbomify.com/CVE-2026-24858/): Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel (critical 9.4, exploited in the wild)
- [CVE-2015-3613](https://insights.sbomify.com/CVE-2015-3613/): Privilege escalation in n/a (critical 9.8)
- [CVE-2019-6695](https://insights.sbomify.com/CVE-2019-6695/): Security feature bypass in Fortinet FortiManager (critical 9.8)
- [CVE-2023-25610](https://insights.sbomify.com/CVE-2023-25610/): Memory corruption in FortiAnalyzer (critical 9.3)
- [CVE-2021-32603](https://insights.sbomify.com/CVE-2021-32603/): Server-side request forgery in Fortinet FortiAnalyzer, FortiManager (high 8.8)
- [CVE-2019-17654](https://insights.sbomify.com/CVE-2019-17654/): Cross-site request forgery in Fortinet FortiManager (high 8.8)
- [CVE-2015-3611](https://insights.sbomify.com/CVE-2015-3611/): Command injection in n/a (high 8.8)
- [CVE-2023-42791](https://insights.sbomify.com/CVE-2023-42791/): Path traversal in FortiAnalyzer (high 8.6)
- [CVE-2024-35277](https://insights.sbomify.com/CVE-2024-35277/): Missing authorization in FortiManager (high 8.4)
- [CVE-2024-46662](https://insights.sbomify.com/CVE-2024-46662/): Command injection in FortiManager (high 8.3)
- [CVE-2018-1360](https://insights.sbomify.com/CVE-2018-1360/): Information disclosure in Fortinet FortiManager (high 8.1)

---
From sbomify Insights: https://insights.sbomify.com/products/fortinet/fortimanager/