4.9
Medium
CVE-2023-33305 A loop with unreachable exit condition ('infinite loop') in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS…
Description
A loop with unreachable exit condition ('infinite loop') in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS version 7.0.0 through 7.0.10, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiProxy version 7.2.0 through 7.2.3, FortiProxy version 7.0.0 through 7.0.9, FortiProxy 2.0 all versions, FortiProxy 1.2 all versions, FortiProxy 1.1 all versions, FortiProxy 1.0 all versions, FortiWeb version 7.2.0 through 7.2.1, FortiWeb version 7.0.0 through 7.0.6, FortiWeb 6.4 all versions, FortiWeb 6.3 all versions allows attacker to perform a denial of service via specially crafted HTTP requests.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiWeb 7.2 | 7.2.0 → 7.2.1 | No fix stated |
| FortiWeb 7.0 | 7.0.0 → 7.0.6 | No fix stated |
| FortiWeb 6.4 | 6.4.0 → 6.4.3 | No fix stated |
| FortiWeb 6.3 | 6.3.0 → 6.3.23 | No fix stated |
| FortiOS 7.2 | 7.2.0 → 7.2.4 | No fix stated |
| FortiOS 7.0 | 7.0.0 → 7.0.10 | No fix stated |
| FortiOS 6.4 | 6.4.0 → 6.4.13 | No fix stated |
| FortiOS 6.2 | 6.2.0 → 6.2.15 | No fix stated |
| FortiOS 6.0 | 6.0.0 → 6.0.17 | No fix stated |
Show the 10 other branches Hide the 10 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiOS 5.6 | 5.6.0 → 5.6.14 | No fix stated |
| FortiOS 5.4 | 5.4.0 → 5.4.13 | No fix stated |
| FortiOS 5.2 | 5.2.0 → 5.2.15 | No fix stated |
| FortiOS 5.0 | 5.0.0 → 5.0.14 | No fix stated |
| FortiProxy 7.2 | 7.2.0 → 7.2.3 | No fix stated |
| FortiProxy 7.0 | 7.0.0 → 7.0.9 | No fix stated |
| FortiProxy 2.0 | 2.0.0 → 2.0.12 | No fix stated |
| FortiProxy 1.2 | 1.2.0 → 1.2.13 | No fix stated |
| FortiProxy 1.1 | 1.1.0 → 1.1.6 | No fix stated |
| FortiProxy 1.0 | 1.0.0 → 1.0.7 | No fix stated |
References
- fortiguard.com fortiguard.com
Timeline
- Published
- Last modified
Other CVEs of FortiWeb
The 74 CVEs of FortiWeb →
CVE-2026-26035
An Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb…
8.8
High
CVE-2026-70466
A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through…
4.8
Medium
CVE-2026-40688
An out-of-bounds write vulnerability [CWE-787] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0…
6.7
Medium
CVE-2026-39811
A integer overflow or wraparound vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6,…
4.4
Medium