Advisories · Technology
Fortinet FortiProxy.
Every CVE that names Fortinet FortiProxy among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 2.1 Low
Double free in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiSwitch
- Memory corruption
- CVSS 2.5 Low
NULL pointer dereference in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiProxy
- Memory corruption
- CVSS 7.3 High
Improper certificate validation in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiProxy
- Weak cryptography or TLS
- CVSS 5.1 Medium
Stack-based buffer overflow in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiPAM
- Memory corruption
- CVSS 4.1 Medium
Fortinet FortiOS: A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3…
- Fortinet FortiOS
- Fortinet FortiPAM
- CWE-126
- CVSS 6.1 Medium
Cross-site scripting in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiProxy
- Cross-site scripting (XSS)
- CVSS 5.0 Medium
Path traversal in Fortinet FortiProxy and others
- Fortinet FortiProxy
- Fortinet FortiOS
- Path traversal
- CVSS 3.1 Low
HTTP response splitting in Fortinet FortiPAM and others
- Fortinet FortiPAM
- Fortinet FortiProxy
- Other injection
- CVSS 3.4 Low
HTTP response splitting in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiPAM
- Other injection
- CVSS 5.9 Medium
Stack-based buffer overflow in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiProxy
- Memory corruption
- CVSS 6.0 Medium
Fortinet FortiOS: An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244]…
- Fortinet FortiOS
- Fortinet FortiProxy
- CWE-1244
- CVSS 5.4 MediumCritical · KEVKEV
Path traversal in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiProxy
- Path traversal
- CVSS 9.4 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
Authentication bypass in Fortinet FortiWeb and others
- Fortinet FortiWeb
- Fortinet FortiNAC-F
- Authentication bypass
- CVSS 6.3 Medium
Sensitive information in log files in Fortinet FortiSASE and others
- Fortinet FortiSASE
- Fortinet FortiProxy
- Information disclosure
- CVSS 9.1 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
Improper signature verification in Fortinet FortiSwitchManager and others
- Fortinet FortiSwitchManager
- Fortinet FortiOS
- Weak cryptography or TLS
- CVSS 1.7 Low
Improper privilege management in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiProxy
- Privilege escalation
- CVSS 2.6 Low
Sensitive information in log files in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiProxy
- Information disclosure
- CVSS 4.2 Medium
Improper authorization in Fortinet FortiProxy and others
- Fortinet FortiProxy
- Fortinet FortiOS
- Broken access control
- CVSS 4.8 Medium
Fortinet FortiOS: An Improperly Implemented Security Check for Standard vulnerability [CWE-358]…
- Fortinet FortiOS
- Fortinet FortiProxy
- CWE-358
- CVSS 5.0 Medium
Improper check for unusual conditions in Fortinet FortiProxy and others
- Fortinet FortiProxy
- Fortinet FortiPAM
- CWE-754
- CVSS 4.2 Medium
Information disclosure in Fortinet FortiManager and others
- Fortinet FortiManager
- Fortinet FortiOS
- Information disclosure
- CVSS 6.3 Medium
Stack-based buffer overflow in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiProxy
- Memory corruption
- CVSS 6.5 Medium
Heap-based buffer overflow in Fortinet FortiManager and others
- Fortinet FortiManager
- Fortinet FortiOS
- Memory corruption
- CVSS 4.5 Medium
Cross-site scripting in Fortinet FortiSASE and others
- Fortinet FortiSASE
- Fortinet FortiOS
- Cross-site scripting (XSS)
- CVSS 5.7 Medium
Heap-based buffer overflow in Fortinet FortiPAM and others
- Fortinet FortiPAM
- Fortinet FortiOS
- Memory corruption
- CVSS 6.8 Medium
Improper certificate validation in Fortinet FortiProxy and others
- Fortinet FortiProxy
- Fortinet FortiOS
- Weak cryptography or TLS
- CVSS 6.7 Medium
Heap-based buffer overflow in Fortinet FortiPAM and others
- Fortinet FortiPAM
- Fortinet FortiProxy
- Memory corruption
- CVSS 2.5 Low
Open redirect in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiProxy
- Open redirect
- CVSS 6.3 Medium
Authentication bypass in Fortinet FortiProxy and others
- Fortinet FortiProxy
- Fortinet FortiOS
- Authentication bypass
- CVSS 7.9 High
Authentication bypass in Fortinet FortiProxy and others
- Fortinet FortiProxy
- Fortinet FortiOS
- Authentication bypass
- CVSS 4.8 Medium
Integer overflow in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiPAM
- Memory corruption
- CVSS 6.3 Medium
Double free in Fortinet FortiProxy and others
- Fortinet FortiProxy
- Fortinet FortiOS
- Memory corruption
- CVSS 6.8 Medium
Fortinet FortiOS: A missing critical step in authentication vulnerability [CWE-304] in Fortinet FortiOS…
- Fortinet FortiOS
- Fortinet FortiProxy
- Authentication bypass
- CVSS 4.9 Medium
Fortinet FortiOS: An Improperly Implemented Security Check for Standard vulnerability [CWE-358] in FortiOS…
- Fortinet FortiOS
- Fortinet FortiProxy
- CWE-358
- CVSS 5.6 Medium
Fortinet FortiOS: A channel accessible by non-endpoint vulnerability [CWE-300] in Fortinet FortiOS version…
- Fortinet FortiOS
- Fortinet FortiProxy
- CWE-300
- CVSS 3.1 Low
Incomplete cleanup in Fortinet FortiProxy and others
- Fortinet FortiProxy
- Fortinet FortiOS
- CWE-459
- CVSS 6.5 Medium
Improper privilege management in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiProxy
- Privilege escalation
- CVSS 4.4 Medium
Insufficient session expiration in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiPAM
- Authentication bypass
- CVSS 9.0 CriticalCritical · CVSS 9+
Missing authentication in Fortinet FortiProxy and others
- Fortinet FortiProxy
- Fortinet FortiSwitchManager
- Authentication bypass
- CVSS 7.1 High
Fortinet FortiProxy: A improper restriction of communication channel to intended endpoints vulnerability…
- Fortinet FortiProxy
- Fortinet FortiManager
- CWE-923
- CVSS 6.7 Medium
Use of uninitialized resource in Fortinet FortiProxy and others
- Fortinet FortiProxy
- Fortinet FortiOS
- Memory corruption
- CVSS 9.3 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0 through 6.4.11 and v…
- Fortinet FortiSwitchManager
- Fortinet FortiAnalyzer
- Memory corruption
- CVSS 4.0 Medium
Cross-site scripting in Fortinet FortiProxy and others
- Fortinet FortiProxy
- Fortinet FortiOS
- Cross-site scripting (XSS)
- CVSS 6.9 Medium
Cross-site scripting in Fortinet FortiProxy and others
- Fortinet FortiProxy
- Fortinet FortiOS
- Cross-site scripting (XSS)
- CVSS 7.0 High
Uncontrolled format string in Fortinet FortiPAM and others
- Fortinet FortiPAM
- Fortinet FortiWeb
- Memory corruption
- CVSS 8.1 HighCritical · KEVKEV · ransomware
Authentication bypass in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiProxy
- Authentication bypass
- CVSS 6.3 Medium
Uncontrolled format string in Fortinet FortiPAM and others
- Fortinet FortiPAM
- Fortinet FortiSwitchManager
- Memory corruption
- CVSS 4.1 Medium
A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests, where the `Host` header points to an arbitr…
- Fortinet FortiTester
- Fortinet FortiOS
- CWE-610
- CVSS 6.4 Medium
HTTP response splitting in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiProxy
- Other injection
- CVSS 8.0 High
Weak authentication in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiProxy
- Authentication bypass
- CVSS 6.7 Medium
Path traversal in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiProxy
- Path traversal
- CVSS 4.7 Medium
Origin validation error in Fortinet FortiProxy and others
- Fortinet FortiProxy
- Fortinet FortiOS
- CWE-346
- CVSS 7.5 High
Out-of-bounds read in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiProxy
- Memory corruption
- CVSS 9.6 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware
Authentication bypass in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiProxy
- Authentication bypass
- CVSS 3.5 Low
Out-of-bounds write in Fortinet FortiProxy and others
- Fortinet FortiProxy
- Fortinet FortiOS
- Memory corruption
- CVSS 5.2 Medium
Missing authentication in Fortinet FortiManager and others
- Fortinet FortiManager
- Fortinet FortiOS
- Authentication bypass
- CVSS 3.6 Low
Fortinet FortiOS: An improper neutralization of special elements in output used by a downstream component…
- Fortinet FortiOS
- Fortinet FortiProxy
- CWE-358
- CVSS 3.5 Low
Insufficient session expiration in Fortinet FortiPAM and others
- Fortinet FortiPAM
- Fortinet FortiProxy
- Authentication bypass
- CVSS 3.1 Low
Fortinet FortiProxy: An incorrect parsing of numbers with different radices vulnerability [CWE-1389] in…
- Fortinet FortiProxy
- Fortinet FortiOS
- CWE-1389
- CVSS 6.7 Medium
Stack-based buffer overflow in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiSwitchManager
- Memory corruption