CVE-2024-47575

State: Published
Severity: 9.8 Critical
Published: Oct 23, 2024
Updated: Oct 21, 2025
Reserved: Sep 27, 2024

Description

A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 through 6.4.14, FortiManager 6.2.0 through 6.2.12, Fortinet FortiManager Cloud 7.4.1 through 7.4.4, FortiManager Cloud 7.2.1 through 7.2.7, FortiManager Cloud 7.0.1 through 7.0.12, FortiManager Cloud 6.4.1 through 6.4.7 allows attacker to execute arbitrary code or commands via specially crafted requests.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:U/RC:C	fortinet

Weaknesses

CWE-306 Execute unauthorized code or commands

Affected Products

Product	Versions
FortiManagerFortinet	7.6.0Affected 7.4.0 through 7.4.4Affected 7.2.0 through 7.2.7Affected 7.0.0 through 7.0.12Affected 6.4.0 through 6.4.14Affected 6.2.0 through 6.2.12Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.