Aller au contenu

Vulnérabilités connues pour Fortinet FortiProxy

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2025-22258 A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0… 5.7 Moyenne 14 oct. 2025
CVE-2025-57740 An Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version 7.4.7 and below,… 6.7 Moyenne 14 oct. 2025
CVE-2025-47890 An URL Redirection to Untrusted Site vulnerabilities [CWE-601] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3,… 2.5 Faible 14 oct. 2025
CVE-2025-22862 An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] in FortiOS 7.4.0 through 7.4.7,… 6.3 Moyenne 2 oct. 2025
CVE-2024-26009 An authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet FortiOS 6.4.0 through… 7.9 Élevée 12 août 2025
CVE-2025-25248 An Integer Overflow or Wraparound vulnerability [CWE-190] in FortiOS version 7.6.2 and below, version 7.4.7 and below,… 4.8 Moyenne 12 août 2025
CVE-2023-45584 A double free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS… 6.3 Moyenne 12 août 2025
CVE-2024-52965 A missing critical step in authentication vulnerability [CWE-304] in Fortinet FortiOS version 7.6.0 through 7.6.1, 7.4.0… 6.8 Moyenne 8 juil. 2025
CVE-2024-55599 An Improperly Implemented Security Check for Standard vulnerability [CWE-358] in FortiOS version 7.6.0, version 7.4.7… 4.9 Moyenne 8 juil. 2025
CVE-2024-50568 A channel accessible by non-endpoint vulnerability [CWE-300] in Fortinet FortiOS version 7.4.0 through 7.4.3, 7.2.0… 5.6 Moyenne 10 juin 2025
CVE-2023-29184 An incomplete cleanup vulnerability [CWE-459] in FortiOS 7.2 all versions and before & FortiProxy version 7.2.0 through… 3.1 Faible 10 juin 2025
CVE-2025-22254 An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1,… 6.5 Moyenne 10 juin 2025
CVE-2024-50562 An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL-VPN version 7.6.0, version 7.4.6 and below,… 4.4 Moyenne 10 juin 2025
CVE-2025-22252 A missing authentication for critical function in Fortinet FortiProxy versions 7.6.0 through 7.6.1, FortiSwitchManager… 9.0 Critique 28 mai 2025
CVE-2024-26013 A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS… 7.1 Élevée 8 avr. 2025
CVE-2023-37930 Multiple issues including the use of uninitialized ressources [CWE-908] and excessive iteration [CWE-834]… 6.7 Moyenne 8 avr. 2025
CVE-2023-25610 A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0… 9.3 Critique 24 mars 2025
CVE-2019-15706 An improper neutralization of input during web page generation in the SSL VPN portal of FortiProxy version 2.0.0,… 4.0 Moyenne 17 mars 2025
CVE-2024-26006 An improper neutralization of input during web page Generation vulnerability [CWE-79] in FortiOS version 7.4.3 and… 6.9 Moyenne 14 mars 2025
CVE-2024-45324 A use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.0 through 7.4.4, version… 7.0 Élevée 11 mars 2025
CVE-2025-24472 Exploitée Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability 8.1 Élevée 11 févr. 2025
CVE-2023-40721 A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet allows a privileged… 6.3 Moyenne 11 févr. 2025
CVE-2022-23439 A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison… 4.1 Moyenne 22 janv. 2025
CVE-2024-54021 An Improper Neutralization of CRLF Sequences in HTTP Headers ('http response splitting') vulnerability [CWE-113] in… 6.4 Moyenne 14 janv. 2025
CVE-2024-48886 A weak authentication in Fortinet FortiOS versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.0.15, 6.4.0… 8.0 Élevée 14 janv. 2025

Autres produits Fortinet