Known vulnerabilities in FortiRecorder

Software: FortiRecorder
Software CPE: cpe:2.3:h:fortinet:fortirecorder:*:*:*:*:*:*:*:*
Total vulnerabilities: 16
Public exploits: 4
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiRecorder FortiRecorder is affected by 16 known vulnerabilities: 1 critical, 2 high, 5 medium, 8 low Critical High Medium Low

Vulnerabilities (16)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123715 - Cleartext Storage of Sensitive Information
CVE-2025-55717
CWE-312 Low
No
No
7.2.4 10.03.2026 SB2026031077
#VU117148 - Insertion of Sensitive Information Into Sent Data
CVE-2024-47569
CWE-201 Low
No
No
7.0.5, 7.2.2 15.10.2025 SB2025101507
#VU113959 -
CVE-2024-40588
Low
No
No
7.0.5, 7.2.2 12.08.2025 SB2025081298
#VU109101 - Stack-based buffer overflow
CVE-2025-32756
CWE-121 Critical
Available
Exploited
6.4.6, 7.0.6, 7.2.4 13.05.2025 SB20250513104
#VU107316 - Argument Injection or Modification
CVE-2024-56497
CWE-88 Low
No
No
6.4.5, 7.0.2 09.04.2025 SB2025040982
#VU103247 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-47566
CWE-22 Low
No
No
7.0.4, 7.0.5, 7.2.2 22.01.2025 SB2025012294
#VU103245 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-46664
CWE-22 Low
No
No
7.0.5, 7.2.2 22.01.2025 SB2025012294
#VU102875 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-48885
CWE-22 Medium
No
No
7.0.5, 7.2.2 16.01.2025 SB2025011650
SB2025011651
SB2025011652
and 3 more
#VU102874 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-48884
CWE-22 Low
No
No
7.0.5, 7.2.2 16.01.2025 SB2025011650
SB2025011651
SB2025011652
and 3 more
#VU93513 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-6387
CWE-362 High
Available
No
6.0.13, 6.4.6, 7.0.5, 7.2.2 01.07.2024 SB2024070144
SB2024070145
SB2024070152
and 89 more
#VU84453 - Cross-Site Request Forgery (CSRF)
CVE-2022-27488
CWE-352 Medium
No
No
6.0.12, 6.4.3 15.12.2023 SB2023121510
SB2023121511
SB2023121512
and 2 more
#VU73217 - Resource exhaustion
CVE-2022-41333
CWE-400 Medium
Available
No
6.0.12, 6.4.4 09.03.2023 SB2023030949
#VU73216 - Improper input validation
CVE-2022-22297
CWE-20 Low
No
No
6.4.4 09.03.2023 SB2023030947
#VU64930 - Integer overflow
CVE-2021-42755
CWE-190 Medium
No
No
6.0.11, 6.4.3 05.07.2022 SB2022070514
SB2022070515
SB2022070516
and 2 more
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778
CWE-835 Medium
Available
No
- 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more
#VU20072 - Use of Hard-coded Credentials
CVE-2019-6698
CWE-798 High
No
No
2.7.4 13.08.2019 SB2019081314