Fortinet Fortisra vulnerabilities

4 CVEs affecting Fortinet Fortisra, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-47570, published 2025-12-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-45324, published 2025-03-11. High severity, CVSS 7.2. EPSS: 0.7% chance of exploitation in the next 30 days. A use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.0 through 7.4.4, version 7.2.0 through 7.2.9, version 7.0.0 through 7.0.15 and before 6.4.15, FortiProxy…
CVE-2025-22258, published 2025-10-14. High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days. A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0 through 1.3.1, 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiProxy…
CVE-2024-47570, published 2025-12-09. Medium severity, CVSS 6.6. EPSS: 0.4% chance of exploitation in the next 30 days. An insertion of sensitive information into log file vulnerability [CWE-532] in FortiOS 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0 all versions; FortiProxy 7.4.0 through 7.4.3, 7.2.0 through…
CVE-2025-22256, published 2025-06-10. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. A improper handling of insufficient permissions or privileges in Fortinet FortiPAM 1.4.0 through 1.4.1, 1.3.0, 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiSRA 1.4.0 through 1.4.1 allows…