CVE-2024-23104mediumCWE-200

CVE-2024-23104: medium-severity vulnerability in Fortinet FortiNDR

Published

Follow this CVE+ Monitor FortiVoice+ Monitor FortiNDR

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.4epss 0.3%
An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiNDR 7.6.0, FortiNDR 7.4.0 through 7.4.8, FortiNDR 7.2 all versions, FortiNDR 7.1 all versions, FortiNDR 7.0 all versions, FortiVoice 7.0.0 through 7.0.1 may allow a remote authenticated attacker with at least read-only permission on system maintenance to access backup information via crafted HTTP requests
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
Affected products
Fortinet · FortiNDRFortinet · FortiVoice
Related CVEs — Fortinet FortiNDR

In the same product, most dangerous first.

CVE-2025-32756CRITICALCVE-2025-32756EPSS 30.9%KEVCVE-2025-47856HIGHCVE-2025-47856EPSS 1.3%CVE-2023-40720MEDIUMCVE-2023-40720EPSS 0.8%CVE-2024-48885MEDIUMCVE-2024-48885EPSS 0.8%CVE-2023-37931HIGHCVE-2023-37931EPSS 0.8%CVE-2021-36193MEDIUMCVE-2021-36193EPSS 0.8%