Latest vulnerabilities for "fortinet fortiproxy" 7.0.0

5.2

First published (updated )

FG-IR-24-032

Fortinet FortiProxyFortiOS - Improper authentication in fgfmd

5.3

First published (updated )

CVE-2024-26011

Fortinet FortiOSSSLVPN WEB UI Text injection

3.6

First published (updated )

FG-IR-24-033

Fortinet FortiOSSSLVPN WEB UI Text injection

4.3

First published (updated )

CVE-2024-33510

Fortinet FortiPAMGUI Console WebSockets do not terminate on logout

8.8

First published (updated )

CVE-2022-45862

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Fortinet FortiOSFortiOS - IP address validation mishandles zero characters

4.7

First published (updated )

CVE-2024-26015

Fortinet FortiOSCross site scripting vulnerability in SSL VPN web UI

6.9

First published (updated )

FG-IR-23-485

Fortinet FortiOSCross site scripting vulnerability in SSL VPN web UI

6.9

First published (updated )

CVE-2024-26006

Fortinet FortiOSWeak key derivation for backup file

4.4

First published (updated )

CVE-2024-21754

Fortinet FortiOSFortiOS/FortiProxy - XSS in reboot page

6.8

First published (updated )

CVE-2024-23111

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Fortinet FortiOSFortiOS/FortiProxy - XSS in reboot page

6.2

First published (updated )

FG-IR-23-471

Fortinet FortiOSSSL-VPN user IP spoofing

4.7

First published (updated )

FG-IR-23-225

Fortinet FortiOSSSL-VPN user IP spoofing

5

First published (updated )

CVE-2023-45586

Fortinet FortiOSFormat String Bug in cli command

6.5

First published (updated )

FG-IR-23-137

Fortinet FortiProxyFormat String Bug in cli command

6.7

First published (updated )

CVE-2023-36640

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Fortinet FortiOSFormat String Bug in cli command

7.2

First published (updated )

CVE-2023-45583

Fortinet FortiProxyAdministrator cookie leakage

7.5

First published (updated )

CVE-2023-41677

Fortinet FortiProxyAdministrator cookie leakage

7.5

First published (updated )

FG-IR-23-493

Fortinet FortiOSOut-of-bounds Write in captive portal

9.3

First published (updated )

CVE-2023-42790

Fortinet FortiOSOut-of-bounds Write in captive portal

9.8

First published (updated )

CVE-2023-42789

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Fortinet FortiOSAuthorization bypass in SSLVPN bookmarks

8

First published (updated )

CVE-2024-23112

Fortinet FortiOSAuthorization bypass in SSLVPN bookmarks

7.2

First published (updated )

FG-IR-24-013

Fortinet FortiProxyOut-of-bound Write in sslvpnd

9.8

Exploited

Zeroday

EPSS

2.29%

First published (updated )

CVE-2024-21762

Fortinet FortiOSFormat String Bug in fgfmd

9.8

Exploited

Zeroday

EPSS

0.09%

First published (updated )

CVE-2024-23113

Fortinet FortiProxyOut-of-bound Write in sslvpnd

9.6

First published (updated )

FG-IR-24-015

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Fortinet FortiOSFormat String Bug in fgfmd

9.8

First published (updated )

FG-IR-24-029

Fortinet FortiOSFormat String Bug in HTTPSd

7

First published (updated )

FG-IR-23-138

Fortinet FortiOSFirewall deny policy bypass

2.8

First published (updated )

FG-IR-23-432

Fortinet FortiOSFormat String Bug in HTTPSd

8.8

First published (updated )

CVE-2023-36639

Fortinet FortiProxyFirewall deny policy bypass

5.3

First published (updated )

CVE-2023-47536

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Fortinet FortiOSDOS in headers management

6.2

First published (updated )

FG-IR-23-151

Fortinet FortiProxyDOS in headers management

6.5

First published (updated )

CVE-2023-36641

Fortinet FortiOSBypass of root file system integrity checks at boot time on VM

6.7

First published (updated )

CVE-2023-28002

Fortinet FortiProxyWebproxy process denial of service

5.3

First published (updated )

CVE-2023-41675

Fortinet FortiOSStored XSS in guest management page

7.3

First published (updated )

FG-IR-23-106

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Fortinet FortiOSStored XSS in guest management page

8

First published (updated )

CVE-2023-29183

Fortinet FortiProxyProxy mode with deep inspection - Stack-based buffer overflow

9.8

First published (updated )

CVE-2023-33308

Fortinet FortiOSAuthenticated user null pointer dereference in SSL-VPN

6.5

First published (updated )

CVE-2023-33306

Fortinet FortiProxyAuthenticated user null pointer dereference in SSL-VPN

6.5

First published (updated )

CVE-2023-33307

Fortinet FortiOSA loop with unreachable exit condition ('infinite loop') in Fortinet FortiOS version 7.2.0 through 7…

6.5

First published (updated )

CVE-2023-33305

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Fortinet FortiOSA use of externally-controlled format string in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiO…

7.8

First published (updated )

CVE-2022-43953

Fortinet FortiProxyPath Traversal

6.5

First published (updated )

CVE-2022-42474

Fortinet FortiProxyA cleartext transmission of sensitive information vulnerability [CWE-319] in Fortinet FortiOS versio…

7.8

First published (updated )

CVE-2022-41327

Fortinet FortiOSSMTP password ciphertext exposure in Log

3.3

First published (updated )

FG-IR-22-455

Fortinet FortiOSAccess of uninitialized pointer in administrative interface API

3.9

First published (updated )

FG-IR-23-095

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Fortinet FortiOSHeap buffer overflow in sslvpn pre-authentication

9.8

Exploited

Zeroday

First published (updated )

CVE-2023-27997

Fortinet FortiProxySMTP password ciphertext exposure in Log

6.5

First published (updated )

CVE-2023-26207

Fortinet FortiOSLack of certificate verification when establishing secure connections

4.8

First published (updated )

CVE-2023-29175

Fortinet FortiProxyOut-of-bound write in CLI

7.8

First published (updated )

CVE-2023-22639

Fortinet FortiProxyAccess of uninitialized pointer in administrative interface API

4.3

First published (updated )

CVE-2023-29178

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.