[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fEibKoY2asN6826o6H_emOPf-PuIp5L0ep0hl36susE4":3,"g5a-family:fortinet\u002Ffortipam":158,"g5a-ex:fortinet\u002Ffortipam@*":159},{"success":4,"data":5},true,{"product":6,"versions":53,"topVulnerabilitiesByEpss":71,"kevVulnerabilities":130,"seoMetadata":136,"meta":155},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":52},"fortinet","fortipam",17,18,1,"2025-10-14",[14,18,20,22,24,27,29,31,33,35,37,39,41,43,45,48,50],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},"1.0.0",0,false,{"version":19,"cve_count":11,"kev_count":16,"has_kev":17},"1.0.1",{"version":21,"cve_count":11,"kev_count":16,"has_kev":17},"1.0.2",{"version":23,"cve_count":11,"kev_count":16,"has_kev":17},"1.0.3",{"version":25,"cve_count":26,"kev_count":16,"has_kev":17},"1.1.0",3,{"version":28,"cve_count":11,"kev_count":16,"has_kev":17},"1.1.1",{"version":30,"cve_count":16,"kev_count":16,"has_kev":17},"1.1.2",{"version":32,"cve_count":11,"kev_count":11,"has_kev":4},"1.2.0",{"version":34,"cve_count":16,"kev_count":16,"has_kev":17},"1.3.0",{"version":36,"cve_count":16,"kev_count":16,"has_kev":17},"1.3.1",{"version":38,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.0",{"version":40,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.1",{"version":42,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.2",{"version":44,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.3",{"version":46,"cve_count":47,"kev_count":16,"has_kev":17},"1.5.0",4,{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},"1.5.1",{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},"1.6.0","Fortipam by Fortinet is a technology product with 17 tracked versions and 18 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},{"version":19,"cve_count":11,"kev_count":16,"has_kev":17},{"version":21,"cve_count":11,"kev_count":16,"has_kev":17},{"version":23,"cve_count":11,"kev_count":16,"has_kev":17},{"version":25,"cve_count":26,"kev_count":16,"has_kev":17},{"version":28,"cve_count":11,"kev_count":16,"has_kev":17},{"version":30,"cve_count":16,"kev_count":16,"has_kev":17},{"version":32,"cve_count":11,"kev_count":11,"has_kev":4},{"version":34,"cve_count":16,"kev_count":16,"has_kev":17},{"version":36,"cve_count":16,"kev_count":16,"has_kev":17},{"version":38,"cve_count":16,"kev_count":16,"has_kev":17},{"version":40,"cve_count":16,"kev_count":16,"has_kev":17},{"version":42,"cve_count":16,"kev_count":16,"has_kev":17},{"version":44,"cve_count":16,"kev_count":16,"has_kev":17},{"version":46,"cve_count":47,"kev_count":16,"has_kev":17},{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},[72,80,87,91,97,102,108,112,119,125],{"cveId":73,"description":74,"publishedDate":75,"cvssScore":76,"cvssVersion":77,"severity":78,"isKev":4,"epssScore":79},"CVE-2024-23113","A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, FortiPAM versions 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiSwitchManager versions 7.2.0 through 7.2.3, 7.0.0 through 7.0.3 allows attacker to execute unauthorized code or commands via specially crafted packets.","2024-02-15",9.8,"v3.1","Critical",0.61725,{"cveId":81,"description":82,"publishedDate":83,"cvssScore":84,"cvssVersion":77,"severity":85,"isKev":17,"epssScore":86},"CVE-2023-41678","A double free in Fortinet FortiOS versions 7.0.0 through 7.0.5, FortiPAM version 1.0.0 through 1.0.3, 1.1.0 through 1.1.1 allows attacker to execute unauthorized code or commands via specifically crafted request.","2023-12-13",8.8,"High",0.01068,{"cveId":88,"description":89,"publishedDate":83,"cvssScore":84,"cvssVersion":77,"severity":85,"isKev":17,"epssScore":90},"CVE-2023-36639","A use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.4, 7.0.0 through 7.0.10, FortiOS versions 7.4.0, 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.12, 6.2.0 through 6.2.15, 6.0.0 through 6.0.17, FortiPAM versions 1.0.0 through 1.0.3 allows attacker to execute unauthorized code or commands  via specially crafted API requests.",0.01059,{"cveId":92,"description":93,"publishedDate":94,"cvssScore":95,"cvssVersion":77,"severity":85,"isKev":17,"epssScore":96},"CVE-2024-26010","A stack-based buffer overflow in Fortinet FortiPAM version 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiWeb, FortiAuthenticator, FortiSwitchManager version 7.2.0 through 7.2.3, 7.0.1 through 7.0.3, FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0.0 through 7.0.14, 6.4.0 through 6.4.15, 6.2.0 through 6.2.16, 6.0.0 through 6.0.18, FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through 7.2.9, 7.0.0 through 7.0.15, 2.0.0 through 2.0.13, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7 allows attacker to execute unauthorized code or commands via specially crafted packets.","2024-06-11",7.5,0.00786,{"cveId":98,"description":99,"publishedDate":100,"cvssScore":84,"cvssVersion":77,"severity":85,"isKev":17,"epssScore":101},"CVE-2023-29181","A use of externally-controlled format string in Fortinet FortiOS 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.12, 6.2.0 through 6.2.14, 6.0.0 through 6.0.16, FortiProxy 7.2.0 through 7.2.4, 7.0.0 through 7.0.10, 2.0.0 through 2.0.12, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7, FortiPAM 1.0.0 through 1.0.3 allows attacker to execute unauthorized code or commands via specially crafted command.","2024-02-22",0.00724,{"cveId":103,"description":104,"publishedDate":105,"cvssScore":106,"cvssVersion":77,"severity":85,"isKev":17,"epssScore":107},"CVE-2023-45583","A use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.5, 7.0.0 through 7.0.11, 2.0.0 through 2.0.13, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6 FortiPAM versions 1.1.0, 1.0.0 through 1.0.3 FortiOS versions 7.4.0, 7.2.0 through 7.2.5, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15 FortiSwitchManager versions 7.2.0 through 7.2.2, 7.0.0 through 7.0.2 allows attacker to execute unauthorized code or commands via specially crafted cli commands and http requests.","2024-05-14",7.2,0.00654,{"cveId":109,"description":110,"publishedDate":12,"cvssScore":95,"cvssVersion":77,"severity":85,"isKev":17,"epssScore":111},"CVE-2025-57740","An Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions; FortiPAM version 1.5.0, version 1.4.2 and below, 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versions and FortiProxy version 7.6.2 and below, version 7.4.3 and below, 7.2 all versions, 7.0 all versions RDP bookmark connection may allow an authenticated user to execute unauthorized code via crafted requests.",0.00621,{"cveId":113,"description":114,"publishedDate":115,"cvssScore":116,"cvssVersion":77,"severity":117,"isKev":17,"epssScore":118},"CVE-2024-26011","A missing authentication for critical function in Fortinet FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.14, FortiPAM version 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through 7.2.9, 7.0.0 through 7.0.17, 2.0.0 through 2.0.14, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7, FortiSwitchManager version 7.2.0 through 7.2.3, 7.0.0 through 7.0.3, FortiPortal version 6.0.0 through 6.0.14, FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0.0 through 7.0.14, 6.4.0 through 6.4.15, 6.2.0 through 6.2.16, 6.0.0 through 6.0.18 allows attacker to execute unauthorized code or commands via specially crafted packets.","2024-11-12",5.3,"Medium",0.00589,{"cveId":120,"description":121,"publishedDate":122,"cvssScore":123,"cvssVersion":77,"severity":117,"isKev":17,"epssScore":124},"CVE-2023-37934","An allocation of resources without limits or throttling vulnerability [CWE-770] in FortiPAM 1.0 all versions allows an authenticated attacker to perform a denial of service attack via sending crafted HTTP or HTTPS requests in a high frequency.","2024-01-10",6.5,0.00587,{"cveId":126,"description":127,"publishedDate":12,"cvssScore":128,"cvssVersion":77,"severity":85,"isKev":17,"epssScore":129},"CVE-2025-49201","A weak authentication in Fortinet FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0 through 1.3.1, 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiSwitchManager 7.2.0 through 7.2.4 allows attacker to execute unauthorized code or commands via specially crafted http requests",8.1,0.00582,[131],{"cveId":73,"description":74,"publishedDate":75,"cvssScore":76,"severity":78,"isKev":4,"epssScore":79,"cisaVulnName":132,"cisaDateAdded":133,"cisaShortDescription":134,"cisaRequiredAction":135},"Fortinet Multiple Products Format String Vulnerability","2024-10-09","Fortinet FortiOS, FortiPAM, FortiProxy, and FortiWeb contain a format string vulnerability that allows a remote, unauthenticated attacker to execute arbitrary code or commands via specially crafted requests.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"title":137,"metaDescription":138,"keywords":139,"structuredData":140},"Fortipam by Fortinet - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Fortipam by Fortinet covering 17 versions with 18 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Fortipam vulnerabilities, Fortipam security, Fortipam CVE, Fortinet Fortipam, Fortipam threat intelligence, Fortinet security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Fortipam KEV, Fortipam exploited vulnerabilities",{"@context":141,"@type":142,"name":143,"description":138,"url":144,"manufacturer":145,"applicationCategory":149,"softwareVersion":150,"mainEntity":151},"https:\u002F\u002Fschema.org","SoftwareApplication","Fortipam","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Ffortinet\u002Ffortipam",{"@type":146,"name":147,"url":148},"Organization","Fortinet","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Ffortinet","Security Software","17 versions tracked",{"@type":152,"name":153,"description":154,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Fortipam Security Vulnerabilities","Security vulnerabilities affecting Fortipam by Fortinet",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":156,"apiVersion":157},"2026-10-28T14:17:20.971Z","3.0",[],{"rows":160,"total":11,"capped":17,"failed":16},[161],{"cveId":73,"name":132,"severity":78,"cvss":76,"added":133,"epss":79,"published":162,"ranges":163,"checked":4,"hits":166,"covers":17},"2024-02-15T14:15:46.503",[164,165,32],"1.0.0 to 1.0.3","1.1.0 to 1.1.2",[]]