Skip to content

Vulnerabilities of Fortinet FortiProxy

Is your version affected?

CVE Summary Score Published
CVE-2023-47536 An improper access control vulnerability [CWE-284] in FortiOS version 7.2.0, version 7.0.13 and below, version 6.4.14… 2.8 Low Dec 13, 2023
CVE-2023-36639 A use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.4, 7.0.0 through… 7.0 High Dec 13, 2023
CVE-2023-28002 An improper validation of integrity check value vulnerability [CWE-354] in FortiOS 7.2.0 through 7.2.3, 7.0.0 through… 5.8 Medium Nov 14, 2023
CVE-2023-36641 A numeric truncation error vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through… 6.2 Medium Nov 14, 2023
CVE-2023-41675 A use after free vulnerability [CWE-416] in FortiOS version 7.2.0 through 7.2.4 and version 7.0.0 through 7.0.10 and… 4.8 Medium Oct 10, 2023
CVE-2023-29183 An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in… 7.3 High Sep 13, 2023
CVE-2023-33308 A stack-based overflow vulnerability [CWE-124] in Fortinet FortiOS version 7.0.0 through 7.0.10 and 7.2.0 through… 9.8 Critical Jul 26, 2023
CVE-2023-33307 A null pointer dereference in Fortinet FortiOS before 7.2.5 and before 7.0.11, FortiProxy before 7.2.3 and before… 6.4 Medium Jun 16, 2023
CVE-2023-33306 A null pointer dereference in Fortinet FortiOS before 7.2.5, before 7.0.11 and before 6.4.13, FortiProxy before 7.2.4… 6.2 Medium Jun 16, 2023
CVE-2023-33305 A loop with unreachable exit condition ('infinite loop') in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS… 4.9 Medium Jun 13, 2023
CVE-2023-29178 A access of uninitialized pointer vulnerability [CWE-824] vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4, FortiOS… 3.9 Low Jun 13, 2023
CVE-2023-29175 An improper certificate validation vulnerability [CWE-295] in FortiOS 6.2 all versions, 6.4 all versions, 7.0.0… 4.4 Medium Jun 13, 2023
CVE-2023-27997 Exploited Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability 9.2 Critical Jun 13, 2023
CVE-2023-26207 An insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4 and FortiProxy… 3.3 Low Jun 13, 2023
CVE-2023-22639 A out-of-bounds write in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0 through 7.0.10, FortiOS… 6.3 Medium Jun 13, 2023
CVE-2022-43953 A use of externally-controlled format string in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS all versions… 6.3 Medium Jun 13, 2023
CVE-2022-42474 A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0… 6.2 Medium Jun 13, 2023
CVE-2022-41327 A cleartext transmission of sensitive information vulnerability [CWE-319] in Fortinet FortiOS version 7.2.0 through… 7.6 High Jun 13, 2023
CVE-2023-22640 A out-of-bounds write vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0 through 7.0.10, FortiOS 6.4.0… 7.1 High May 3, 2023
CVE-2022-43947 An improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiOS version 7.2.0… 4.7 Medium Apr 11, 2023
CVE-2023-22641 A url redirection to untrusted site ('open redirect') in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version… 4.1 Medium Apr 11, 2023
CVE-2022-41330 An improper neutralization of input during web page generation vulnerability ('Cross-site Scripting') [CWE-79] in… 8.3 High Apr 11, 2023
CVE-2022-41329 An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiProxy version… 5.2 Medium Mar 7, 2023
CVE-2022-42476 A relative path traversal vulnerability [CWE-23] vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0… 7.8 High Mar 7, 2023
CVE-2022-45861 An access of uninitialized pointer vulnerability [CWE-824] in the SSL VPN portal of Fortinet FortiOS version 7.2.0… 6.4 Medium Mar 7, 2023

Other Fortinet products