Fortinet Fortios, Fortiproxy
Approved changes feed: RSS · Atom
cpe:2.3:a:fortinet:fortinet_fortios,_fortiproxy:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Fortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947) |
|---|---|
| Product | Fortinet Fortios, Fortiproxy (88e42970-abe5-5795-ba35-12350bb31640) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-29055 |
vulnerable | 2026-06-08 05:42:46.383499 |
Details available
HIGH (7.5)
A access of uninitialized pointer in Fortinet FortiOS version 7.2.0, 7.0.0 through 7.0.5, 6.4.0 through 6.4.8, 6.2.0 through 6.2.10, 6.0.x, FortiProxy version 7.0.0 through 7.0.4, 2.0.0 through 2.0.9, 1.2.x allows a remote unauthenticated or authenticated attacker to crash the sslvpn daemon via an HTTP GET request.
Published: 2022-10-10T00:00:00.000Z
Updated: 2024-10-25T13:29:37.823Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43206 |
vulnerable | 2026-06-08 05:36:42.441892 |
Details available
MEDIUM (4.3)
A server-generated error message containing sensitive information in Fortinet FortiOS 7.0.0 through 7.0.3, 6.4.0 through 6.4.8, 6.2.x, 6.0.x and FortiProxy 7.0.0 through 7.0.1, 2.0.x allows malicious webservers to retrieve a web proxy's client username and IP via same origin HTTP requests triggering proxy-generated HTTP status codes pages.
Published: 2022-05-04T15:25:26.000Z
Updated: 2024-10-22T20:57:35.305Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-26110 |
vulnerable | 2026-06-08 05:30:41.996615 |
Details available
HIGH (7.8)
An improper access control vulnerability [CWE-284] in FortiOS autod daemon 7.0.0, 6.4.6 and below, 6.2.9 and below, 6.0.12 and below and FortiProxy 2.0.1 and below, 1.2.9 and below may allow an authenticated low-privileged attacker to escalate their privileges to super_admin via a specific crafted configuration of fabric automation CLI script and auto-script features.
Published: 2021-12-08T10:41:25.000Z
Updated: 2024-10-25T13:42:47.340Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-26092 |
vulnerable | 2026-06-08 05:30:41.952385 |
Details available
MEDIUM (4.7)
Failure to sanitize input in the SSL VPN web portal of FortiOS 5.2.10 through 5.2.15, 5.4.0 through 5.4.13, 5.6.0 through 5.6.14, 6.0.0 through 6.0.12, 6.2.0 through 6.2.7, 6.4.0 through 6.4.4; and FortiProxy 1.2.0 through 1.2.9, 2.0.0 through 2.0.1 may allow a remote unauthenticated attacker to perform a reflected Cross-site Scripting (XSS) attack by sending a request to the error page with malicious GET parameters.
Published: 2022-02-24T02:45:57.000Z
Updated: 2024-10-22T21:01:11.565Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13382 |
vulnerable | 2026-06-08 05:10:51.219170 |
Details available
CRITICAL (9.1)
An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5.4.1 to 5.4.10 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to modify the password of an SSL VPN web portal user via specially crafted HTTP requests
Published: 2019-06-04T20:33:53.000Z
Updated: 2025-10-21T23:45:35.394Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13379 |
vulnerable | 2026-06-08 05:10:51.214673 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.