5.1
Medium
CVE-2022-33876 Multiple instances of improper input validation vulnerability in Fortinet FortiADC version 7.1.0, version 7.0.0…
Description
Multiple instances of improper input validation vulnerability in Fortinet FortiADC version 7.1.0, version 7.0.0 through 7.0.2 and version 6.2.4 and below allows an authenticated attacker to retrieve files with specific extension from the underlying Linux system via crafted HTTP requests.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiADC | 7.1.0 | No fix stated |
| FortiADC 7.0 | 7.0.0 → 7.0.2 | No fix stated |
| FortiADC 6.2 | 6.2.0 → 6.2.4 | No fix stated |
| FortiADC 6.1 | 6.1.0 → 6.1.6 | No fix stated |
| FortiADC 6.0 | 6.0.0 → 6.0.4 | No fix stated |
| FortiADC 5.4 | 5.4.0 → 5.4.5 | No fix stated |
| FortiADC 5.3 | 5.3.0 → 5.3.7 | No fix stated |
| FortiADC 5.2 | 5.2.0 → 5.2.8 | No fix stated |
| FortiADC 5.1 | 5.1.0 → 5.1.7 | No fix stated |
Other CVEs of FortiADC
The 33 CVEs of FortiADC →
CVE-2025-58412
A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiADC…
4.2
Medium
CVE-2025-48839
An Out-of-bounds Write vulnerability [CWE-787] in FortiADC 8.0.0, 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2 all…
6.3
Medium
CVE-2025-54971
An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiADC 7.4.0, FortiADC 7.2 all…
3.9
Low
CVE-2025-59921
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiADC version…
6.2
Medium