CVE-2021-36170

3.2 lowEPSS 0.2%

Low (3.2) in fortinet. EPSS 0.2% chance of exploitation in the next 30 days.

An information disclosure vulnerability [CWE-200] in FortiAnalyzerVM and FortiManagerVM versions 7.0.0 and 6.4.6 and below may allow an authenticated attacker to read the FortiCloud credentials which were used to activate the trial license in cleartext.

Severity

CVSS 3.1

3.2 low

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 13% of CVEs (scores of 2026-10-31)
CWE: CWE-522
Published: 2021-10-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortianalyzer
fortinet:fortimanager

References

https://fortiguard.com/advisory/FG-IR-21-112
https://fortiguard.com/advisory/FG-IR-21-112

Check your stack JSON