[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f0E4zXLfR0BR11PtGkZFqkXvpTZD6Xe8sAFx_J5yQVV4":3,"g5a-ex:fortinet\u002Ffortisoar@*":189,"g5a-family:fortinet\u002Ffortisoar":191},{"success":4,"data":5},true,{"product":6,"versions":76,"topVulnerabilitiesByEpss":106,"kevVulnerabilities":166,"seoMetadata":167,"meta":186},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":75},"fortinet","fortisoar",29,21,0,"2025-12-09",[14,18,20,22,24,26,28,30,32,34,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67,69,71,73],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"6.0.0",1,false,{"version":19,"cve_count":11,"kev_count":11,"has_kev":17},"6.4.0",{"version":21,"cve_count":11,"kev_count":11,"has_kev":17},"6.4.1",{"version":23,"cve_count":11,"kev_count":11,"has_kev":17},"6.4.3",{"version":25,"cve_count":11,"kev_count":11,"has_kev":17},"6.4.4",{"version":27,"cve_count":11,"kev_count":11,"has_kev":17},"7.0.0",{"version":29,"cve_count":11,"kev_count":11,"has_kev":17},"7.0.1",{"version":31,"cve_count":11,"kev_count":11,"has_kev":17},"7.0.2",{"version":33,"cve_count":11,"kev_count":11,"has_kev":17},"7.0.3",{"version":35,"cve_count":36,"kev_count":11,"has_kev":17},"7.2.0",6,{"version":38,"cve_count":11,"kev_count":11,"has_kev":17},"7.2.1",{"version":40,"cve_count":11,"kev_count":11,"has_kev":17},"7.2.2",{"version":42,"cve_count":11,"kev_count":11,"has_kev":17},"7.3.0",{"version":44,"cve_count":11,"kev_count":11,"has_kev":17},"7.3.1",{"version":46,"cve_count":11,"kev_count":11,"has_kev":17},"7.3.2",{"version":48,"cve_count":11,"kev_count":11,"has_kev":17},"7.3.3",{"version":50,"cve_count":16,"kev_count":11,"has_kev":17},"7.4.0",{"version":52,"cve_count":11,"kev_count":11,"has_kev":17},"7.4.1",{"version":54,"cve_count":11,"kev_count":11,"has_kev":17},"7.4.2",{"version":56,"cve_count":11,"kev_count":11,"has_kev":17},"7.4.3",{"version":58,"cve_count":11,"kev_count":11,"has_kev":17},"7.4.4",{"version":60,"cve_count":11,"kev_count":11,"has_kev":17},"7.4.5",{"version":62,"cve_count":16,"kev_count":11,"has_kev":17},"7.5.0",{"version":64,"cve_count":11,"kev_count":11,"has_kev":17},"7.5.1",{"version":66,"cve_count":11,"kev_count":11,"has_kev":17},"7.5.2",{"version":68,"cve_count":16,"kev_count":11,"has_kev":17},"7.6.0",{"version":70,"cve_count":11,"kev_count":11,"has_kev":17},"7.6.1",{"version":72,"cve_count":11,"kev_count":11,"has_kev":17},"7.6.2",{"version":74,"cve_count":11,"kev_count":11,"has_kev":17},"7.6.3","Fortisoar by Fortinet is a technology product with 29 tracked versions and 21 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":11,"kev_count":11,"has_kev":17},{"version":21,"cve_count":11,"kev_count":11,"has_kev":17},{"version":23,"cve_count":11,"kev_count":11,"has_kev":17},{"version":25,"cve_count":11,"kev_count":11,"has_kev":17},{"version":27,"cve_count":11,"kev_count":11,"has_kev":17},{"version":29,"cve_count":11,"kev_count":11,"has_kev":17},{"version":31,"cve_count":11,"kev_count":11,"has_kev":17},{"version":33,"cve_count":11,"kev_count":11,"has_kev":17},{"version":35,"cve_count":36,"kev_count":11,"has_kev":17},{"version":38,"cve_count":11,"kev_count":11,"has_kev":17},{"version":40,"cve_count":11,"kev_count":11,"has_kev":17},{"version":42,"cve_count":11,"kev_count":11,"has_kev":17},{"version":44,"cve_count":11,"kev_count":11,"has_kev":17},{"version":46,"cve_count":11,"kev_count":11,"has_kev":17},{"version":48,"cve_count":11,"kev_count":11,"has_kev":17},{"version":50,"cve_count":16,"kev_count":11,"has_kev":17},{"version":52,"cve_count":11,"kev_count":11,"has_kev":17},{"version":54,"cve_count":11,"kev_count":11,"has_kev":17},{"version":56,"cve_count":11,"kev_count":11,"has_kev":17},{"version":58,"cve_count":11,"kev_count":11,"has_kev":17},{"version":60,"cve_count":11,"kev_count":11,"has_kev":17},{"version":62,"cve_count":16,"kev_count":11,"has_kev":17},{"version":64,"cve_count":11,"kev_count":11,"has_kev":17},{"version":66,"cve_count":11,"kev_count":11,"has_kev":17},{"version":68,"cve_count":16,"kev_count":11,"has_kev":17},{"version":70,"cve_count":11,"kev_count":11,"has_kev":17},{"version":72,"cve_count":11,"kev_count":11,"has_kev":17},{"version":74,"cve_count":11,"kev_count":11,"has_kev":17},[107,115,121,127,132,139,145,150,154,161],{"cveId":108,"description":109,"publishedDate":110,"cvssScore":111,"cvssVersion":112,"severity":113,"isKev":17,"epssScore":114},"CVE-2022-29061","An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiSOAR before 7.2.1 allows an authenticated attacker to execute unauthorized code or commands via crafted HTTP GET requests.","2022-09-09",7.2,"v3.1","High",0.01547,{"cveId":116,"description":117,"publishedDate":118,"cvssScore":119,"cvssVersion":112,"severity":113,"isKev":17,"epssScore":120},"CVE-2022-23443","An improper access control in Fortinet FortiSOAR before 7.2.0 allows unauthenticated attackers to access gateway API data via crafted HTTP GET requests.","2022-05-04",7.5,0.01206,{"cveId":122,"description":123,"publishedDate":124,"cvssScore":125,"cvssVersion":112,"severity":113,"isKev":17,"epssScore":126},"CVE-2023-27995","A improper neutralization of special elements used in a template engine vulnerability in Fortinet FortiSOAR 7.3.0 through 7.3.1 allows an authenticated, remote attacker to execute arbitrary code via a crafted payload.","2023-04-11",8.8,0.01141,{"cveId":128,"description":129,"publishedDate":130,"cvssScore":111,"cvssVersion":112,"severity":113,"isKev":17,"epssScore":131},"CVE-2023-25605","A improper access control vulnerability in Fortinet FortiSOAR 7.3.0 - 7.3.1 allows an attacker authenticated on the administrative interface to perform unauthorized actions via crafted HTTP requests.","2023-03-07",0.00906,{"cveId":133,"description":134,"publishedDate":135,"cvssScore":136,"cvssVersion":112,"severity":137,"isKev":17,"epssScore":138},"CVE-2023-23775","Multiple improper neutralization of special elements used in SQL commands ('SQL Injection') vulnerabilities [CWE-89] in FortiSOAR 7.2.0 and before 7.0.3 may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted strings parameters.","2024-06-11",6.5,"Medium",0.00832,{"cveId":140,"description":141,"publishedDate":142,"cvssScore":143,"cvssVersion":112,"severity":137,"isKev":17,"epssScore":144},"CVE-2024-36510","An observable response discrepancy vulnerability [CWE-204] in FortiClientEMS 7.4.0, 7.2.0 through 7.2.4, 7.0 all versions, and FortiSOAR 7.5.0, 7.4.0 through 7.4.4, 7.3.0 through 7.3.2, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an unauthenticated attacker to enumerate valid users via observing login request responses.","2025-01-14",5.3,0.00701,{"cveId":146,"description":147,"publishedDate":148,"cvssScore":136,"cvssVersion":112,"severity":137,"isKev":17,"epssScore":149},"CVE-2022-29062","Multiple relative path traversal vulnerabilities [CWE-23] in Fortinet FortiSOAR before 7.2.1 allows an authenticated attacker to write to the underlying filesystem with nginx permissions via crafted HTTP requests.","2022-09-06",0.00695,{"cveId":151,"description":152,"publishedDate":148,"cvssScore":125,"cvssVersion":112,"severity":113,"isKev":17,"epssScore":153},"CVE-2022-35847","An improper neutralization of special elements used in a template engine vulnerability [CWE-1336] in FortiSOAR management interface 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.4 may allow a remote and authenticated attacker to execute arbitrary code via a crafted payload.",0.00675,{"cveId":155,"description":156,"publishedDate":157,"cvssScore":158,"cvssVersion":112,"severity":159,"isKev":17,"epssScore":160},"CVE-2023-26211","An improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiSOAR 7.3.0 through 7.3.2 allows an authenticated, remote attacker to inject arbitrary web script or HTML via the Communications module.","2024-08-13",9,"Critical",0.00666,{"cveId":162,"description":163,"publishedDate":164,"cvssScore":136,"cvssVersion":112,"severity":137,"isKev":17,"epssScore":165},"CVE-2024-31493","An improper removal of sensitive information before storage or transfer vulnerability [CWE-212] in FortiSOAR version 7.3.0, version 7.2.2 and below, version 7.0.3 and below may allow an authenticated low privileged user to read Connector passwords in plain-text via HTTP responses.","2024-06-03",0.00527,[],{"title":168,"metaDescription":169,"keywords":170,"structuredData":171},"Fortisoar by Fortinet - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Fortisoar by Fortinet covering 29 versions with 21 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Fortisoar vulnerabilities, Fortisoar security, Fortisoar CVE, Fortinet Fortisoar, Fortisoar threat intelligence, Fortinet security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":172,"@type":173,"name":174,"description":169,"url":175,"manufacturer":176,"applicationCategory":180,"softwareVersion":181,"mainEntity":182},"https:\u002F\u002Fschema.org","SoftwareApplication","Fortisoar","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Ffortinet\u002Ffortisoar",{"@type":177,"name":178,"url":179},"Organization","Fortinet","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Ffortinet","Security Software","29 versions tracked",{"@type":183,"name":184,"description":185,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Fortisoar Security Vulnerabilities","Security vulnerabilities affecting Fortisoar by Fortinet",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":187,"apiVersion":188},"2026-10-28T14:17:28.333Z","3.0",{"rows":190,"total":11,"capped":17,"failed":11},[],[192],{"product":193,"cves":16},"fortisoar_imap_connector"]