CVE-2021-36192: Fortinet FortiManager

Low severity, CVSS 3.8. EPSS: 0.2% chance of exploitation in the next 30 days.

An exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in FortiManager 7.0.1 and below, 6.4.6 and below, 6.2.x, 6.0.x, 5.6.0 may allow a FortiGate user to see scripts from other ADOMS.

Affected products

• Fortinet FortiManager: from 5.6.0, up to and including 5.6.11; from 6.0.0, up to and including 6.0.11; from 6.2.0, up to and including 6.2.8; from 6.4.0, before 6.4.6 (fixed in 6.4.6); from 7.0.0, before 7.0.1 (fixed in 7.0.1)

Published 2021-11-03. Last modified 2026-06-17.