Fortinet Fortiproxy
Approved changes feed: RSS · Atom
cpe:2.3:a:fortinet:fortinet_fortiproxy:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Fortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947) |
|---|---|
| Product | Fortinet Fortiproxy (29a74046-7fe2-58e8-aaed-9d49a72877c9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-43081 |
vulnerable | 2026-06-08 05:36:42.243776 |
Details available
MEDIUM (6.1)
An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS version 7.0.3 and below, 6.4.8 and below, 6.2.10 and below, 6.0.14 to 6.0.0. and in FortiProxy version 7.0.1 and below, 2.0.7 to 2.0.0 web filter override form may allow an unauthenticated attacker to perform an XSS attack via crafted HTTP GET requests.
Published: 2022-05-11T14:30:18.000Z
Updated: 2024-10-22T20:57:08.663Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22130 |
vulnerable | 2026-06-08 05:29:59.899026 |
Details available
MEDIUM (6.7)
A stack-based buffer overflow vulnerability in FortiProxy physical appliance CLI 2.0.0 to 2.0.1, 1.2.0 to 1.2.9, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 may allow an authenticated, remote attacker to perform a Denial of Service attack by running the `diagnose sys cpuset` with a large cpuset mask value. Fortinet is not aware of any successful exploitation of this vulnerability that would lead to code execution.
Published: 2021-06-03T10:27:47.000Z
Updated: 2024-10-25T13:58:00.281Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22128 |
vulnerable | 2026-06-08 05:29:59.893641 |
Details available
HIGH (7.1)
An improper access control vulnerability in FortiProxy SSL VPN portal 2.0.0, 1.2.9 and below versions may allow an authenticated, remote attacker to access internal service such as the ZebOS Shell on the FortiProxy appliance through the Quick Connection functionality.
Published: 2021-03-04T17:27:43.000Z
Updated: 2024-10-25T13:59:55.356Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.