Vulnerability Monitor

The vendors, products, and vulnerabilities you care about
fortiportal Vendor: fortinet

About This Product

fortiportal is a software product offered by fortinet. This product is widely deployed in production environments, making vulnerability monitoring essential for organizations relying on it. Security vulnerabilities in products of this category can affect system availability, data confidentiality, and integrity across entire networks. The moderate vulnerability count reflects ongoing security research and responsible disclosure practices. Regular assessment of known vulnerabilities and timely patching are fundamental components of responsible system administration for any deployment of this software.

Vulnerability Landscape Summary

SecUtils has identified 44 known vulnerabilities affecting fortinet fortiportal. This includes 4 critical-severity issues and 9 high-severity issues that warrant immediate attention. Vulnerabilities in this product have been disclosed spanning from 2017 to 2025, indicating a sustained research interest and ongoing security attention. 28 medium-severity issues and 3 low-severity issues complete the vulnerability landscape. Organizations should prioritize patching based on deployment context, asset criticality, and exploitation likelihood rather than severity alone.

Known Vulnerabilities
ID Date Published Last Modified Severity (CVSSv3) Severity (CVSSv2) Exploit Available
CVE-2017-7337 2017-05-27 2025-04-20 9.1 6.4 Likely
CVE-2017-7338 2017-05-27 2025-04-20 7.5 5.0 Likely
CVE-2017-7339 2017-05-27 2025-04-20 6.1 4.3 Likely
CVE-2017-7343 2017-05-27 2025-04-20 6.1 5.8 Likely
CVE-2017-7731 2017-05-27 2025-04-20 7.5 5.0 Likely
CVE-2017-7340 2019-03-25 2024-11-21 6.1 4.3 Likely
CVE-2017-7342 2019-03-25 2024-11-21 9.8 7.5 Likely
CVE-2021-32590 2021-08-04 2024-11-21 9.9 9.0 Likely
CVE-2021-32594 2021-08-04 2024-11-21 5.4 5.5 Likely
CVE-2021-36168 2021-08-04 2024-11-21 6.5 4.0 Likely
CVE-2021-32596 2021-08-04 2024-11-21 6.0 5.0 Likely
CVE-2021-32588 2021-08-18 2024-11-21 9.8 10.0 Likely
CVE-2021-32602 2021-08-19 2024-11-21 5.8 4.3 Likely
CVE-2021-32595 2021-11-02 2024-11-21 6.5 4.0 Likely
CVE-2021-36172 2021-11-02 2024-11-21 4.3 6.4 Likely
CVE-2021-36181 2021-11-02 2024-11-21 3.1 3.5 Unknown
CVE-2021-36174 2021-11-02 2024-11-21 4.3 5.0 Likely
CVE-2021-36176 2021-11-02 2024-11-21 6.1 4.3 Likely
CVE-2021-42757 2021-12-08 2025-10-16 6.7 4.6 Unknown
CVE-2021-36171 2022-03-01 2024-11-21 8.1 6.8 Likely
CVE-2021-26104 2022-04-06 2024-11-21 7.8 7.2 Unknown
CVE-2022-41336 2023-01-03 2024-11-21 6.8 - -
CVE-2022-43954 2023-02-16 2024-11-21 4.3 - -
CVE-2022-27490 2023-03-07 2024-11-21 5.4 - -
CVE-2023-48791 2023-12-13 2024-11-21 8.8 - -
CVE-2023-46712 2024-01-10 2024-11-21 7.2 - -
CVE-2023-48783 2024-01-10 2024-11-21 5.4 - -
CVE-2023-41842 2024-03-12 2026-01-14 6.7 - -
CVE-2024-21761 2024-03-12 2024-11-21 4.3 - -
CVE-2024-23105 2024-05-14 2024-11-21 7.5 - -
CVE-2023-48789 2024-06-03 2025-01-02 4.3 - -
CVE-2024-31495 2024-06-11 2025-01-02 4.3 - -
CVE-2024-21759 2024-07-09 2024-11-21 4.3 - -
CVE-2023-47543 2024-11-12 2025-01-02 5.4 - -
CVE-2024-26011 2024-11-12 2024-12-12 5.3 - -
CVE-2021-32589 2024-12-19 2025-01-31 8.1 - -
CVE-2024-35278 2025-01-14 2025-01-31 4.3 - -
CVE-2024-52967 2025-01-14 2025-02-03 3.5 - -
CVE-2025-24470 2025-02-11 2025-07-22 8.6 - -
CVE-2024-40590 2025-03-14 2025-07-24 4.8 - -
CVE-2025-46777 2025-05-28 2025-06-04 2.3 - -
CVE-2024-45329 2025-06-10 2025-07-22 4.3 - -
CVE-2025-54838 2025-12-09 2025-12-09 6.8 - -
CVE-2024-40593 2025-12-11 2025-12-12 6.0 - -

How SecUtils Interprets Product Data

SecUtils normalizes and enriches National Vulnerability Database (NVD) records for fortinet fortiportal by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and structuring the data for rapid analysis and asset correlation. For every vulnerability listed, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference information to enable organizations to prioritize patching and risk assessment efficiently. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for vulnerability management and security operations.