Known vulnerabilities in FortiAnalyzer Cloud

Vendor: Fortinet, Inc
Software: FortiAnalyzer Cloud
Software CPE: cpe:2.3:a:fortinet:fortianalyzer_cloud:*:*:*:*:*:*:*:*
Website: https://www.fortinet.com/
Total vulnerabilities: 10
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiAnalyzer Cloud FortiAnalyzer Cloud is affected by 10 known vulnerabilities: 3 high, 1 medium, 6 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117134 - Heap-based Buffer Overflow
CVE-2024-50571		 CWE-122 Low
No
No
 7.0.14, 7.2.10, 7.4.6 14.10.2025 SB20251014106
#VU107372 - Weak Authentication
CVE-2024-50563		 CWE-1390 High
No
No
 7.4.4 10.04.2025 SB2025041046
#VU107373 - Weak Authentication
CVE-2024-48886		 CWE-1390 High
No
No
 7.4.4 10.04.2025 SB2025041046
#VU107367 - Buffer Underwrite ('Buffer Underflow')
CVE-2024-35276		 CWE-124 Medium
No
No
 7.0.12, 7.2.6, 7.4.4 10.04.2025 SB2025041041
#VU107362 - Improper Privilege Management
CVE-2024-45331		 CWE-269 Low
No
No
 7.2.7, 7.4.3 10.04.2025 SB2025041038
#VU107363 - Improper Privilege Management
CVE-2024-33503		 CWE-269 Low
No
No
 7.2.7, 7.4.3 10.04.2025 SB2025041038
#VU107359 - Out-of-bounds write
CVE-2024-35273		 CWE-787 Low
No
No
 7.4.3 10.04.2025 SB2025041036
#VU107358 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-35275		 CWE-89 Low
No
No
 7.4.3 10.04.2025 SB2025041035
#VU107312 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-40584		 CWE-78 Low
No
No
 7.2.6, 7.4.4 09.04.2025 SB2025040977
#VU100413 - Heap-based Buffer Overflow
CVE-2024-33505		 CWE-122 High
No
No
 7.2.7, 7.4.3 12.11.2024 SB20241112168
SB20241112169