Fortinet

FortiProxy

117 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
3.3

CVE-2022-29054

  • EPSS 0.08%
  • Veröffentlicht 16.02.2023 19:15:12
  • Zuletzt bearbeitet 21.11.2024 06:58:25

A missing cryptographic steps vulnerability [CWE-325] in the functions that encrypt the DHCP and DNS keys in Fortinet FortiOS version 7.2.0, 7.0.0 through 7.0.5, 6.4.0 through 6.4.9, 6.2.x and 6.0.x may allow an attacker in possession of the encrypte...

6

CVE-2022-38378

  • EPSS 0.04%
  • Veröffentlicht 16.02.2023 19:15:12
  • Zuletzt bearbeitet 21.11.2024 07:16:21

An improper privilege management vulnerability [CWE-269] in Fortinet FortiOS version 7.2.0 and before 7.0.7 and FortiProxy version 7.2.0 through 7.2.1 and before 7.0.7 allows an attacker that has access to the admin profile section (System subsection...

7.4

CVE-2022-39948

  • EPSS 0.16%
  • Veröffentlicht 16.02.2023 19:15:12
  • Zuletzt bearbeitet 21.11.2024 07:18:32

An improper certificate validation vulnerability [CWE-295] in FortiOS 7.2.0 through 7.2.3, 7.0.0 through 7.0.7, 6.4 all versions, 6.2 all versions, 6.0 all versions and FortiProxy 7.0.0 through 7.0.6, 2.0 all versions, 1.2 all versions may allow a re...

4.3

CVE-2021-43074

  • EPSS 0.12%
  • Veröffentlicht 16.02.2023 19:15:11
  • Zuletzt bearbeitet 21.11.2024 06:28:38

An improper verification of cryptographic signature vulnerability [CWE-347] in FortiWeb 6.4 all versions, 6.3.16 and below, 6.2 all versions, 6.1 all versions, 6.0 all versions; FortiOS 7.0.3 and below, 6.4.8 and below, 6.2 all versions, 6.0 all vers...

9.8

CVE-2022-42475

Warnung Medienbericht Exploit
  • EPSS 94.06%
  • Veröffentlicht 02.01.2023 09:15:09
  • Zuletzt bearbeitet 24.10.2025 12:54:20

A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier and FortiProxy SSL-VPN 7.2.0 through 7.2.1, 7.0.7 and earlier may allow ...

9.8

CVE-2022-35843

  • EPSS 0.51%
  • Veröffentlicht 06.12.2022 17:15:10
  • Zuletzt bearbeitet 21.11.2024 07:11:48

An authentication bypass by assumed-immutable data vulnerability [CWE-302] in the FortiOS SSH login component 7.2.0, 7.0.0 through 7.0.7, 6.4.0 through 6.4.9, 6.2 all versions, 6.0 all versions and FortiProxy SSH login component 7.0.0 through 7.0.5...

7.5

CVE-2022-29055

  • EPSS 0.62%
  • Veröffentlicht 18.10.2022 15:15:09
  • Zuletzt bearbeitet 21.11.2024 06:58:25

A access of uninitialized pointer in Fortinet FortiOS version 7.2.0, 7.0.0 through 7.0.5, 6.4.0 through 6.4.8, 6.2.0 through 6.2.10, 6.0.x, FortiProxy version 7.0.0 through 7.0.4, 2.0.0 through 2.0.9, 1.2.x allows a remote unauthenticated or authenti...

9.8

CVE-2022-40684

Warnung Medienbericht Exploit
  • EPSS 94.43%
  • Veröffentlicht 18.10.2022 14:15:09
  • Zuletzt bearbeitet 14.01.2026 19:19:58

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 all...

7.8

CVE-2022-22299

  • EPSS 0.2%
  • Veröffentlicht 05.08.2022 20:15:08
  • Zuletzt bearbeitet 21.11.2024 06:46:35

A format string vulnerability [CWE-134] in the command line interpreter of FortiADC version 6.0.0 through 6.0.4, FortiADC version 6.1.0 through 6.1.5, FortiADC version 6.2.0 through 6.2.1, FortiProxy version 1.0.0 through 1.0.7, FortiProxy version 1....

4.3

CVE-2021-42755

  • EPSS 0.1%
  • Veröffentlicht 18.07.2022 17:15:08
  • Zuletzt bearbeitet 21.11.2024 06:28:06

An integer overflow / wraparound vulnerability [CWE-190] in FortiSwitch 7.0.2 and below, 6.4.9 and below, 6.2.x, 6.0.x; FortiRecorder 6.4.2 and below, 6.0.10 and below; FortiOS 7.0.2 and below, 6.4.8 and below, 6.2.10 and below, 6.0.x; FortiProxy 7.0...