Third Party Index

Fortinet

fortinet.com

Transparency

Minimal

Breakdown
Subprocessor listnot found0 / 30
Processing locationsno list0 / 8
Purposesno list0 / 7
Data processing addendumnot found0 / 12
Trust center8 / 8
Privacy policynot found0 / 6
security.txtnot found0 / 6
Security pagenot found0 / 5
Status pagenot found0 / 5
Vulnerability disclosurenot found0 / 5
Pages still reachable8 / 8
Total16 / 100

Only documents we can retrieve count: a page behind a login or a broken link scores nothing.

Badge

Fortinet transparency rating

For Fortinet's own site; it updates with the rating.

<a href="https://thirdpartyindex.com/vendors/fortinet"><img src="https://thirdpartyindex.com/badge/fortinet.svg" alt="Fortinet transparency rating on Third Party Index" height="20"></a>
[![Fortinet transparency rating on Third Party Index](https://thirdpartyindex.com/badge/fortinet.svg)](https://thirdpartyindex.com/vendors/fortinet)

Documents

DocumentVerifiedChangedEvidence
Trust center safebase snapshot

Subprocessors

None extracted.

Listed as a subprocessor by (2)

Purposes as each company states them.

Security record

What public security catalogs list for Fortinet, in their words.

Known exploited vulnerabilities

30 vulnerabilities in Fortinet's software that CISA lists as exploited in the wild.

CVEProductVulnerabilityListed
CVE-2025-25249Multiple ProductsFortinet Multiple Products Heap-based Buffer Overflow Vulnerability evidence
CVE-2025-68686FortiOSFortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability evidence
CVE-2026-25089FortiSandboxFortinet FortiSandbox OS Command Injection Vulnerability evidence
CVE-2026-39808FortiSandboxFortinet FortiSandbox OS Command Injection Vulnerability evidence
CVE-2026-21643FortiClient EMSFortinet FortiClient EMS SQL Injection Vulnerability evidence
CVE-2026-35616FortiClient EMSFortinet FortiClient EMS Improper Access Control Vulnerability evidence
CVE-2026-24858Multiple ProductsFortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability evidence
CVE-2025-59718Multiple ProductsFortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability evidence
CVE-2025-58034FortiWebFortinet FortiWeb OS Command Injection Vulnerability evidence
CVE-2025-64446FortiWebFortinet FortiWeb Path Traversal Vulnerability evidence
20 more
CVEProductVulnerabilityListed
CVE-2025-25257FortiWebFortinet FortiWeb SQL Injection Vulnerability evidence
CVE-2019-6693FortiOSFortinet FortiOS Use of Hard-Coded Credentials Vulnerability used by ransomware evidence
CVE-2025-32756Multiple ProductsFortinet Multiple Products Stack-Based Buffer Overflow Vulnerability evidence
CVE-2025-24472FortiOS and FortiProxyFortinet FortiOS and FortiProxy Authentication Bypass Vulnerability used by ransomware evidence
CVE-2024-55591FortiOS and FortiProxyFortinet FortiOS and FortiProxy Authentication Bypass Vulnerability used by ransomware evidence
CVE-2024-47575FortiManagerFortinet FortiManager Missing Authentication Vulnerability evidence
CVE-2024-23113Multiple ProductsFortinet Multiple Products Format String Vulnerability evidence
CVE-2023-48788FortiClient EMSFortinet FortiClient EMS SQL Injection Vulnerability used by ransomware evidence
CVE-2024-21762FortiOSFortinet FortiOS Out-of-Bound Write Vulnerability used by ransomware evidence
CVE-2023-27997FortiOS and FortiProxy SSL-VPNFortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability used by ransomware evidence
CVE-2022-41328FortiOSFortinet FortiOS Path Traversal Vulnerability evidence
CVE-2022-42475FortiOSFortinet FortiOS Heap-Based Buffer Overflow Vulnerability used by ransomware evidence
CVE-2022-40684Multiple ProductsFortinet Multiple Products Authentication Bypass Vulnerability used by ransomware evidence
CVE-2018-13374FortiOS and FortiADCFortinet FortiOS and FortiADC Improper Access Control Vulnerability used by ransomware evidence
CVE-2018-13382FortiOS and FortiProxyFortinet FortiOS and FortiProxy Improper Authorization used by ransomware evidence
CVE-2018-13383FortiOS and FortiProxyFortinet FortiOS and FortiProxy Out-of-bounds Write used by ransomware evidence
CVE-2021-44168FortiOSFortinet FortiOS Arbitrary File Download evidence
CVE-2018-13379FortiOSFortinet FortiOS SSL VPN Path Traversal Vulnerability used by ransomware evidence
CVE-2019-5591FortiOSFortinet FortiOS Default Configuration Vulnerability used by ransomware evidence
CVE-2020-12812FortiOSFortinet FortiOS SSL VPN Improper Authentication Vulnerability used by ransomware evidence

Source: CISA Known Exploited Vulnerabilities catalog.

Changes

None since tracking began.