Fortinet Fortivoice vulnerabilities

24 CVEs affecting Fortinet Fortivoice, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-23104, published 2026-04-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-32756: Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability, published 2025-05-13. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2025-05-14. EPSS: 30.7% chance of exploitation in the next 30 days. A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1 all versions, FortiMail 7.6.0 through…
CVE-2020-9294, published 2020-04-27. Critical severity, CVSS 9.8. EPSS: 77.8% chance of exploitation in the next 30 days. An improper authentication vulnerability in FortiMail 5.4.10, 6.0.7, 6.2.2 and earlier and FortiVoiceEntreprise 6.0.0 and 6.0.1 may allow a remote unauthenticated attacker to access the system as a…
CVE-2024-48884, published 2025-01-14. Critical severity, CVSS 9.1. EPSS: 15.3% chance of exploitation in the next 30 days. A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3, FortiManager Cloud 7.4.1…
CVE-2025-47856, published 2025-10-14. High severity, CVSS 7.2. EPSS: 1.3% chance of exploitation in the next 30 days. Two improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiVoice version 7.2.0, 7.0.0 through 7.0.6 and before 6.4.10…
CVE-2023-40720, published 2024-05-14. High severity, CVSS 7.1. EPSS: 0.8% chance of exploitation in the next 30 days. An authorization bypass through user-controlled key vulnerability [CWE-639] in FortiVoiceEntreprise version 7.0.0 through 7.0.1 and before 6.4.8 allows an authenticated attacker to read the SIP…
CVE-2023-37931, published 2025-01-14. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. An improper neutralization of special elements used in an sql command ('sql injection') vulnerability [CWE-88] in FortiVoice Entreprise version 7.0.0 through 7.0.1 and before 6.4.8 allows an…
CVE-2024-48885, published 2025-01-16. Critical severity, CVSS 9.1. EPSS: 0.8% chance of exploitation in the next 30 days. A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiRecorder 7.2.0 through 7.2.1, FortiRecorder 7.0.0 through 7.0.4, FortiVoice 7.0.0…
CVE-2025-58693, published 2026-01-13. Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days. An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiVoice 7.2.0 through 7.2.2, FortiVoice 7.0.0 through 7.0.7 allows a privileged attacker…
CVE-2024-40587, published 2025-01-14. Medium severity, CVSS 6.7. EPSS: 0.6% chance of exploitation in the next 30 days. An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiVoice version 7.0.0 through 7.0.4 and before 6.4.9 allows an…
CVE-2023-37932, published 2024-01-10. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability [CWE-22] in FortiVoiceEntreprise version 7.0.0 and before 6.4.7 allows an authenticated attacker to…

Latest

CVE-2024-23104, published 2026-04-14. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiNDR 7.6.0, FortiNDR 7.4.0 through 7.4.8, FortiNDR 7.2 all versions, FortiNDR 7.1 all versions, FortiNDR…
CVE-2025-55717, published 2026-03-10. Medium severity, CVSS 4.0. EPSS: 0.1% chance of exploitation in the next 30 days. A cleartext storage of sensitive information vulnerability [CWE-312] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.2, FortiMail 7.4.0 through 7.4.4, FortiMail 7.2.0 through 7.2.7, FortiMail…
CVE-2025-64156, published 2025-12-09. High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days. An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiVoice 7.2.0 through 7.2.2, FortiVoice 7.0.0 through 7.0.7, FortiVoice 6.4 all…
CVE-2025-60024, published 2025-12-09. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. Multiple Improper Limitations of a Pathname to a Restricted Directory ('Path Traversal') vulnerabilities [CWE-22] vulnerability in Fortinet FortiVoice 7.2.0 through 7.2.2, FortiVoice 7.0.0 through…
CVE-2025-58692, published 2025-11-18. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] vulnerability in Fortinet FortiVoice 7.2.0 through 7.2.2, FortiVoice 7.0.0 through 7.0.7…
CVE-2024-47569, published 2025-10-14. Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days. A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, FortiMail 7.0 all versions, FortiManager 7.6.0 through…
CVE-2024-40588, published 2025-08-12. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. Multiple relative path traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiCamera 2.1 all versions, FortiCamera 2.0.0, FortiCamera 1.1 all versions, FortiCamera 1.0 all versions,…