[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fEibKoY2asN6826o6H_emOPf-PuIp5L0ep0hl36susE4":3,"g5a-family:fortinet\u002Ffortipam":159,"g5a-ex:fortinet\u002Ffortipam@*":160},{"success":4,"data":5},true,{"product":6,"versions":53,"topVulnerabilitiesByEpss":71,"kevVulnerabilities":131,"seoMetadata":137,"meta":156},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":52},"fortinet","fortipam",17,18,1,"2025-10-14",[14,18,20,22,24,27,29,31,33,35,37,39,41,43,45,48,50],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},"1.0.0",0,false,{"version":19,"cve_count":11,"kev_count":16,"has_kev":17},"1.0.1",{"version":21,"cve_count":11,"kev_count":16,"has_kev":17},"1.0.2",{"version":23,"cve_count":11,"kev_count":16,"has_kev":17},"1.0.3",{"version":25,"cve_count":26,"kev_count":16,"has_kev":17},"1.1.0",3,{"version":28,"cve_count":11,"kev_count":16,"has_kev":17},"1.1.1",{"version":30,"cve_count":16,"kev_count":16,"has_kev":17},"1.1.2",{"version":32,"cve_count":11,"kev_count":11,"has_kev":4},"1.2.0",{"version":34,"cve_count":16,"kev_count":16,"has_kev":17},"1.3.0",{"version":36,"cve_count":16,"kev_count":16,"has_kev":17},"1.3.1",{"version":38,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.0",{"version":40,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.1",{"version":42,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.2",{"version":44,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.3",{"version":46,"cve_count":47,"kev_count":16,"has_kev":17},"1.5.0",4,{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},"1.5.1",{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},"1.6.0","Fortipam by Fortinet is a technology product with 17 tracked versions and 18 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},{"version":19,"cve_count":11,"kev_count":16,"has_kev":17},{"version":21,"cve_count":11,"kev_count":16,"has_kev":17},{"version":23,"cve_count":11,"kev_count":16,"has_kev":17},{"version":25,"cve_count":26,"kev_count":16,"has_kev":17},{"version":28,"cve_count":11,"kev_count":16,"has_kev":17},{"version":30,"cve_count":16,"kev_count":16,"has_kev":17},{"version":32,"cve_count":11,"kev_count":11,"has_kev":4},{"version":34,"cve_count":16,"kev_count":16,"has_kev":17},{"version":36,"cve_count":16,"kev_count":16,"has_kev":17},{"version":38,"cve_count":16,"kev_count":16,"has_kev":17},{"version":40,"cve_count":16,"kev_count":16,"has_kev":17},{"version":42,"cve_count":16,"kev_count":16,"has_kev":17},{"version":44,"cve_count":16,"kev_count":16,"has_kev":17},{"version":46,"cve_count":47,"kev_count":16,"has_kev":17},{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},[72,80,87,91,97,102,106,113,119,125],{"cveId":73,"description":74,"publishedDate":75,"cvssScore":76,"cvssVersion":77,"severity":78,"isKev":4,"epssScore":79},"CVE-2024-23113","A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, FortiPAM versions 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiSwitchManager versions 7.2.0 through 7.2.3, 7.0.0 through 7.0.3 allows attacker to execute unauthorized code or commands via specially crafted packets.","2024-02-15",9.8,"v3.1","Critical",0.61725,{"cveId":81,"description":82,"publishedDate":83,"cvssScore":84,"cvssVersion":77,"severity":85,"isKev":17,"epssScore":86},"CVE-2023-41678","A double free in Fortinet FortiOS versions 7.0.0 through 7.0.5, FortiPAM version 1.0.0 through 1.0.3, 1.1.0 through 1.1.1 allows attacker to execute unauthorized code or commands via specifically crafted request.","2023-12-13",8.8,"High",0.01068,{"cveId":88,"description":89,"publishedDate":83,"cvssScore":84,"cvssVersion":77,"severity":85,"isKev":17,"epssScore":90},"CVE-2023-36639","A use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.4, 7.0.0 through 7.0.10, FortiOS versions 7.4.0, 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.12, 6.2.0 through 6.2.15, 6.0.0 through 6.0.17, FortiPAM versions 1.0.0 through 1.0.3 allows attacker to execute unauthorized code or commands  via specially crafted API requests.",0.01059,{"cveId":92,"description":93,"publishedDate":94,"cvssScore":95,"cvssVersion":77,"severity":85,"isKev":17,"epssScore":96},"CVE-2024-26010","A stack-based buffer overflow in Fortinet FortiPAM version 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiWeb, FortiAuthenticator, FortiSwitchManager version 7.2.0 through 7.2.3, 7.0.1 through 7.0.3, FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0.0 through 7.0.14, 6.4.0 through 6.4.15, 6.2.0 through 6.2.16, 6.0.0 through 6.0.18, FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through 7.2.9, 7.0.0 through 7.0.15, 2.0.0 through 2.0.13, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7 allows attacker to execute unauthorized code or commands via specially crafted packets.","2024-06-11",7.5,0.00786,{"cveId":98,"description":99,"publishedDate":100,"cvssScore":84,"cvssVersion":77,"severity":85,"isKev":17,"epssScore":101},"CVE-2023-29181","A use of externally-controlled format string in Fortinet FortiOS 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.12, 6.2.0 through 6.2.14, 6.0.0 through 6.0.16, FortiProxy 7.2.0 through 7.2.4, 7.0.0 through 7.0.10, 2.0.0 through 2.0.12, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7, FortiPAM 1.0.0 through 1.0.3 allows attacker to execute unauthorized code or commands via specially crafted command.","2024-02-22",0.00724,{"cveId":103,"description":104,"publishedDate":12,"cvssScore":95,"cvssVersion":77,"severity":85,"isKev":17,"epssScore":105},"CVE-2025-57740","An Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions; FortiPAM version 1.5.0, version 1.4.2 and below, 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versions and FortiProxy version 7.6.2 and below, version 7.4.3 and below, 7.2 all versions, 7.0 all versions RDP bookmark connection may allow an authenticated user to execute unauthorized code via crafted requests.",0.00681,{"cveId":107,"description":108,"publishedDate":109,"cvssScore":110,"cvssVersion":77,"severity":111,"isKev":17,"epssScore":112},"CVE-2026-59837","A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiPAM 1.8.0 through 1.8.2, FortiPAM 1.7 all versions, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.4.0 through 7.4.13, FortiProxy 7.2 all versions may allow a privileged authenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands via crafted HTTP requests.","2026-07-14",6.6,"Medium",0.0067,{"cveId":114,"description":115,"publishedDate":116,"cvssScore":117,"cvssVersion":77,"severity":111,"isKev":17,"epssScore":118},"CVE-2023-45583","A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0.0 through 6.0.16, FortiPAM 1.1.0, FortiPAM 1.0 all versions, FortiProxy 7.2.0 through 7.2.5, FortiProxy 7.0.0 through 7.0.11, FortiProxy 2.0 all versions, FortiProxy 1.2 all versions, FortiProxy 1.1 all versions, FortiProxy 1.0 all versions, FortiSwitchManager 7.2.0 through 7.2.2, FortiSwitchManager 7.0.0 through 7.0.2 allows attacker to execute unauthorized code or commands via specially crafted cli commands and http requests.","2024-05-14",6.7,0.00659,{"cveId":120,"description":121,"publishedDate":122,"cvssScore":123,"cvssVersion":77,"severity":111,"isKev":17,"epssScore":124},"CVE-2024-26011","A missing authentication for critical function in Fortinet FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.14, FortiPAM version 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through 7.2.9, 7.0.0 through 7.0.17, 2.0.0 through 2.0.14, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7, FortiSwitchManager version 7.2.0 through 7.2.3, 7.0.0 through 7.0.3, FortiPortal version 6.0.0 through 6.0.14, FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0.0 through 7.0.14, 6.4.0 through 6.4.15, 6.2.0 through 6.2.16, 6.0.0 through 6.0.18 allows attacker to execute unauthorized code or commands via specially crafted packets.","2024-11-12",5.3,0.00597,{"cveId":126,"description":127,"publishedDate":128,"cvssScore":129,"cvssVersion":77,"severity":85,"isKev":17,"epssScore":130},"CVE-2024-26009","An authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet FortiOS version 6.4.0 through 6.4.15\tand before 6.2.16, FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through 7.2.8 and before 7.0.15 & FortiPAM before version 1.2.0 allows an unauthenticated attacker to seize control of a managed device via crafted FGFM requests, if the device is managed by a FortiManager, and if the attacker knows that FortiManager's serial number.","2025-08-12",8.1,0.00592,[132],{"cveId":73,"description":74,"publishedDate":75,"cvssScore":76,"severity":78,"isKev":4,"epssScore":79,"cisaVulnName":133,"cisaDateAdded":134,"cisaShortDescription":135,"cisaRequiredAction":136},"Fortinet Multiple Products Format String Vulnerability","2024-10-09","Fortinet FortiOS, FortiPAM, FortiProxy, and FortiWeb contain a format string vulnerability that allows a remote, unauthenticated attacker to execute arbitrary code or commands via specially crafted requests.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"title":138,"metaDescription":139,"keywords":140,"structuredData":141},"Fortipam by Fortinet - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Fortipam by Fortinet covering 17 versions with 18 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Fortipam vulnerabilities, Fortipam security, Fortipam CVE, Fortinet Fortipam, Fortipam threat intelligence, Fortinet security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Fortipam KEV, Fortipam exploited vulnerabilities",{"@context":142,"@type":143,"name":144,"description":139,"url":145,"manufacturer":146,"applicationCategory":150,"softwareVersion":151,"mainEntity":152},"https:\u002F\u002Fschema.org","SoftwareApplication","Fortipam","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Ffortinet\u002Ffortipam",{"@type":147,"name":148,"url":149},"Organization","Fortinet","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ffortinet","Security Software","17 versions tracked",{"@type":153,"name":154,"description":155,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Fortipam Security Vulnerabilities","Security vulnerabilities affecting Fortipam by Fortinet",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":157,"apiVersion":158},"2026-10-18T15:49:12.784Z","3.0",[],{"rows":161,"total":11,"capped":17,"failed":16},[162],{"cveId":73,"name":133,"severity":78,"cvss":76,"added":134,"epss":79,"published":163,"ranges":164,"checked":4,"hits":167,"covers":17},"2024-02-15T14:15:46.503",[165,166,32],"1.0.0 to 1.0.3","1.1.0 to 1.1.2",[]]