Known vulnerabilities in FortiNDR

Vendor: Fortinet, Inc
Software: FortiNDR
Software CPE: cpe:2.3:a:fortinet:fortiai:*:*:*:*:*:*:*:*
Website: https://www.fortinet.com/
Total vulnerabilities: 9
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiNDR FortiNDR is affected by 9 known vulnerabilities: 1 critical, 3 medium, 5 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131202 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-25088		 CWE-89 Low
No
No
 7.4.10, 7.6.3 12.05.2026 SB2026051296
#VU125992 - Exposure of sensitive information to an unauthorized actor
CVE-2024-23104		 CWE-200 Low
No
No
 7.4.9, 7.6.1 14.04.2026 SB20260414115
#VU117148 - Insertion of Sensitive Information Into Sent Data
CVE-2024-47569		 CWE-201 Low
No
No
 7.4.9, 7.6.2 15.10.2025 SB2025101507
#VU113959 -
CVE-2024-40588		 Low
No
No
 7.4.7, 7.6.1 12.08.2025 SB2025081298
#VU109101 - Stack-based buffer overflow
CVE-2025-32756		 CWE-121 Critical
Available
Exploited
 7.0.7, 7.2.5, 7.4.8, 7.6.1 13.05.2025 SB20250513104
#VU107343 - Improper Validation of Integrity Check Value
CVE-2024-47573		 CWE-354 Low
No
No
 7.2.2, 7.4.3 10.04.2025 SB2025041024
#VU105610 - Cross-Site Request Forgery (CSRF)
CVE-2023-48790		 CWE-352 Medium
No
No
 7.0.6, 7.1.2, 7.2.2, 7.4.1 11.03.2025 SB20250311112
#VU84453 - Cross-Site Request Forgery (CSRF)
CVE-2022-27488		 CWE-352 Medium
No
No
 7.0.5, 7.1.1 15.12.2023 SB2023121510
SB2023121511
SB2023121512
and 2 more
#VU52851 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-24023		 CWE-78 Medium
No
No
 1.5.0 04.05.2021 SB2021050417