Fortinet FortiProxy 7.4.12
Approved changes feed: RSS · Atom
cpe:2.3:a:fortinet:fortiproxy:7.4.12:*:*:*:*:*:*:*
part: a version: 7.4.12 update: *
| Vendor | Fortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947) |
|---|---|
| Product | Fortiproxy (e11e5361-2582-5bee-af8e-604c3136a1e6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-84392 |
vulnerable | 2026-09-16 04:33:10.521302 |
Details available
LOW (2.5)
A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiPAM 1.9.0, FortiPAM 1.8 all versions, FortiPAM 1.7 all versions, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions may allow an authenticated attacker to crash the httpsd daemon via crafted HTTP requests.
Published: 2026-09-08T16:42:06.190Z
Updated: 2026-09-08T17:28:27.907Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-59840 |
vulnerable | 2026-07-29 01:03:17.988509 |
Details available
MEDIUM (4.1)
A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.6.5, FortiProxy 7.4.0 through 7.4.13, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions may allow attacker to information disclosure via <insert attack vector here>
Published: 2026-07-14T15:19:51.309Z
Updated: 2026-08-11T12:23:48.662Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-59839 |
vulnerable | 2026-07-29 01:03:17.876929 |
Details available
MEDIUM (5)
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.8.0, FortiPAM 1.7.0 through 1.7.2, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.5, FortiProxy 7.4 through 7.4.13, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>
Published: 2026-07-14T15:19:46.961Z
Updated: 2026-08-11T12:23:47.540Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-59837 |
vulnerable | 2026-07-29 01:03:17.699704 |
Details available
MEDIUM (5.9)
A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiPAM 1.8.0 through 1.8.2, FortiPAM 1.7 all versions, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.4.0 through 7.4.13, FortiProxy 7.2 all versions may allow a privileged authenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands via crafted HTTP requests.
Published: 2026-07-14T15:06:31.443Z
Updated: 2026-08-11T12:23:46.394Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62826 |
vulnerable | 2026-07-29 00:09:53.537924 |
Details available
LOW (3.1)
An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions may allow an attacker able to intercept and modify a user's captive portal authentication request to inject arbitrary headers via crafted HTTP requests.
Published: 2026-07-14T15:19:46.918Z
Updated: 2026-08-11T12:23:17.671Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62675 |
vulnerable | 2026-07-29 00:09:53.291369 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24858 |
vulnerable | 2026-06-08 07:53:18.523181 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54821 |
vulnerable | 2026-06-08 07:33:13.312838 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-47890 |
vulnerable | 2026-06-08 07:27:14.984094 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-31514 |
vulnerable | 2026-06-08 07:18:57.993343 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.