This report was translated by AI; nobody has reviewed the translation yet. Original language: Slovak.

[TLP:CLEAR] Fortinet fixes 5 vulnerabilities in various products

Fortinet fixes 5 vulnerabilities in various products. The most severe vulnerabilities are listed below. Products and their fixed versions: FortiOS - 7.6.3, 7.4.8, 7.2.12 [1][3][4] FortiProxy - 7.6.2, 7.4.9 [1][3] FortiIsolator - 2.4.5 [2] FortiSandbox - 4.4.5, 4.2.7 [2] FortiAnalyzer - 7.6.2, 7.4.7 [5] FortiAnalyzer Cloud - 7.4.7 [5] FortiManager - 7.6.2, 7.4.7 [5] FortiManager Cloud - 7.4.7 [5]

FortiOS, FortiProxy - incorrect authentication (CVE-2024-52965)
CVSS 7.2 (High)

An unauthenticated remote attacker can authenticate using an API key and an invalid certificate [1].

The vulnerability is present in products:

  • FortiOS; >=7.0, <7.0.17; >=7.2, <7.2.11; >=7.4, <7.4.6; >=7.6, <7.6.3;
  • FortiProxy; >=7.0, <7.0.21; >=7.2, <7.2.14; >=7.4, <7.4.9; >=7.6, <7.6.2;

CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:C

More information:

The vulnerability was publicly disclosed 8. 7. 2025.

FortiIsolator, FortiSandbox - Insufficient Session Expiration (CVE-2024-27779)
CVSS 6.7 (Medium)

An unauthenticated remote attacker with the session cookie of an admin account can keep using that account even after it has been deleted [2].

The vulnerability is present in products:

  • FortiIsolator; >= 1.2, <1.3; >=2.0, <2.4.5;
  • FortiSandbox; >=3.2, <3.3; >=4.0, <4.1; >=4.2, <4.2.7; >=4.4, <4.4.5;

CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L/E:P/RL:X/RC:C

More information:

The vulnerability was publicly disclosed 8. 7. 2025.

FortiOS, FortiProxy - DNS filter bypass (CVE-2024-55599)
CVSS 5.3 (Medium)

An unauthenticated remote attacker can bypass the DNS filter. Exploiting the vulnerability requires the victim to access a malicious domain from an Apple device [3].

The vulnerability is present in products:

  • FortiProxy; >=7.0, <7.1; >=7.2, <7.3; >=7.4, <7.4.9; >=7.6, <7.6.2;
  • FortiOS; >=6.4, <6.5; >=7.0, <7.1; >=7.2, <7.2.11; >=7.4.0, <7.4.8; >=7.6, <7.6.1;

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U/RL:X/RC:X

More information:

The vulnerability was publicly disclosed 8. 7. 2025.

FortiAnalyzer (Cloud), FortiManager (Cloud) - SQL injection (CVE-2025-244474)
CVSS 2.7 (Low)

An authenticated remote attacker can gain unauthorized access to information from the database by sending specially crafted requests [5].

The vulnerability is present in products:

  • FortiAnalyzer; >=6.4, <6.5; >=7.0, <7.1; >=7.2, <7.3; >=7.4, <7.4.7; >=7.6, <7.6.2;
  • FortiAnalyzer Cloud; >=6.4, <6.5; >=7.0, <7.1; >=7.2, <7.3; >=7.4, <7.4.7;
  • FortiManager; >=6.4, <6.5; >=7.0, <7.1; >=7.2, <7.3; >=7.4, <7.4.7; >=7.6, <7.6.2;
  • FortiManager Cloud; >=6.4, <6.5; >=7.0, <7.1; >=7.2, <7.3; >=7.4, <7.4.7;

CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C

More information:

  • CVE-2025-244474 at cve.org, NVD
  • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') at cwe.mitre.org

The vulnerability was publicly disclosed 8. 7. 2025.

By CESNET, z.s.p.o. Martin Krajči on 9. 7. 2025.

CESNET, z.s.p.o. Logo