[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fo72PfH93ZQjs9vdqNNyPOYkpnYbMooK-i5DS8N9QndE":3,"g5a-family:fortinet\u002Ffortiproxy":458,"g5a-ex:fortinet\u002Ffortiproxy@*":459},{"success":4,"data":5},true,{"product":6,"versions":226,"topVulnerabilitiesByEpss":328,"kevVulnerabilities":382,"seoMetadata":436,"meta":455},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":225},"fortinet","fortiproxy",101,105,11,"2025-12-09",[14,19,21,23,25,27,29,31,33,35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67,69,71,73,75,79,82,84,86,88,90,92,94,96,98,100,102,104,106,108,110,113,115,117,119,121,123,125,127,129,131,133,135,137,139,141,143,145,147,149,151,153,155,157,160,163,165,167,169,171,173,175,177,179,181,183,185,187,189,191,193,195,197,199,201,203,205,207,209,211,213,215,217,219,221,223],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"1.0.0",1,0,false,{"version":20,"cve_count":17,"kev_count":17,"has_kev":18},"1.0.1",{"version":22,"cve_count":17,"kev_count":17,"has_kev":18},"1.0.2",{"version":24,"cve_count":17,"kev_count":17,"has_kev":18},"1.0.3",{"version":26,"cve_count":17,"kev_count":17,"has_kev":18},"1.0.4",{"version":28,"cve_count":17,"kev_count":17,"has_kev":18},"1.0.5",{"version":30,"cve_count":17,"kev_count":17,"has_kev":18},"1.0.6",{"version":32,"cve_count":17,"kev_count":17,"has_kev":18},"1.0.7",{"version":34,"cve_count":16,"kev_count":17,"has_kev":18},"1.1.0",{"version":36,"cve_count":17,"kev_count":17,"has_kev":18},"1.1.1",{"version":38,"cve_count":17,"kev_count":17,"has_kev":18},"1.1.2",{"version":40,"cve_count":17,"kev_count":17,"has_kev":18},"1.1.3",{"version":42,"cve_count":17,"kev_count":17,"has_kev":18},"1.1.4",{"version":44,"cve_count":16,"kev_count":17,"has_kev":18},"1.1.5",{"version":46,"cve_count":16,"kev_count":17,"has_kev":18},"1.1.6",{"version":48,"cve_count":16,"kev_count":17,"has_kev":18},"1.2.0",{"version":50,"cve_count":17,"kev_count":17,"has_kev":18},"1.2.1",{"version":52,"cve_count":17,"kev_count":17,"has_kev":18},"1.2.10",{"version":54,"cve_count":17,"kev_count":17,"has_kev":18},"1.2.11",{"version":56,"cve_count":17,"kev_count":17,"has_kev":18},"1.2.12",{"version":58,"cve_count":17,"kev_count":17,"has_kev":18},"1.2.13",{"version":60,"cve_count":17,"kev_count":17,"has_kev":18},"1.2.2",{"version":62,"cve_count":17,"kev_count":17,"has_kev":18},"1.2.3",{"version":64,"cve_count":17,"kev_count":17,"has_kev":18},"1.2.4",{"version":66,"cve_count":17,"kev_count":17,"has_kev":18},"1.2.5",{"version":68,"cve_count":17,"kev_count":17,"has_kev":18},"1.2.6",{"version":70,"cve_count":17,"kev_count":17,"has_kev":18},"1.2.7",{"version":72,"cve_count":17,"kev_count":17,"has_kev":18},"1.2.8",{"version":74,"cve_count":17,"kev_count":17,"has_kev":18},"1.2.9",{"version":76,"cve_count":77,"kev_count":78,"has_kev":4},"2.0.0",10,3,{"version":80,"cve_count":81,"kev_count":17,"has_kev":18},"2.0.1",2,{"version":83,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.10",{"version":85,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.11",{"version":87,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.12",{"version":89,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.13",{"version":91,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.14",{"version":93,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.15",{"version":95,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.2",{"version":97,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.3",{"version":99,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.4",{"version":101,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.5",{"version":103,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.6",{"version":105,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.7",{"version":107,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.8",{"version":109,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.9",{"version":111,"cve_count":112,"kev_count":17,"has_kev":18},"7.0.0",4,{"version":114,"cve_count":81,"kev_count":17,"has_kev":18},"7.0.1",{"version":116,"cve_count":17,"kev_count":17,"has_kev":18},"7.0.10",{"version":118,"cve_count":17,"kev_count":17,"has_kev":18},"7.0.11",{"version":120,"cve_count":17,"kev_count":17,"has_kev":18},"7.0.12",{"version":122,"cve_count":17,"kev_count":17,"has_kev":18},"7.0.13",{"version":124,"cve_count":17,"kev_count":17,"has_kev":18},"7.0.14",{"version":126,"cve_count":17,"kev_count":17,"has_kev":18},"7.0.15",{"version":128,"cve_count":17,"kev_count":17,"has_kev":18},"7.0.16",{"version":130,"cve_count":17,"kev_count":17,"has_kev":18},"7.0.17",{"version":132,"cve_count":17,"kev_count":17,"has_kev":18},"7.0.18",{"version":134,"cve_count":17,"kev_count":17,"has_kev":18},"7.0.19",{"version":136,"cve_count":17,"kev_count":17,"has_kev":18},"7.0.2",{"version":138,"cve_count":17,"kev_count":17,"has_kev":18},"7.0.20",{"version":140,"cve_count":17,"kev_count":17,"has_kev":18},"7.0.21",{"version":142,"cve_count":17,"kev_count":17,"has_kev":18},"7.0.22",{"version":144,"cve_count":17,"kev_count":17,"has_kev":18},"7.0.3",{"version":146,"cve_count":17,"kev_count":17,"has_kev":18},"7.0.4",{"version":148,"cve_count":17,"kev_count":17,"has_kev":18},"7.0.5",{"version":150,"cve_count":17,"kev_count":17,"has_kev":18},"7.0.6",{"version":152,"cve_count":17,"kev_count":17,"has_kev":18},"7.0.7",{"version":154,"cve_count":17,"kev_count":17,"has_kev":18},"7.0.8",{"version":156,"cve_count":17,"kev_count":17,"has_kev":18},"7.0.9",{"version":158,"cve_count":159,"kev_count":16,"has_kev":4},"7.2.0",15,{"version":161,"cve_count":162,"kev_count":17,"has_kev":18},"7.2.1",13,{"version":164,"cve_count":17,"kev_count":17,"has_kev":18},"7.2.10",{"version":166,"cve_count":17,"kev_count":17,"has_kev":18},"7.2.11",{"version":168,"cve_count":17,"kev_count":17,"has_kev":18},"7.2.12",{"version":170,"cve_count":17,"kev_count":17,"has_kev":18},"7.2.13",{"version":172,"cve_count":17,"kev_count":17,"has_kev":18},"7.2.14",{"version":174,"cve_count":17,"kev_count":17,"has_kev":18},"7.2.15",{"version":176,"cve_count":112,"kev_count":17,"has_kev":18},"7.2.2",{"version":178,"cve_count":16,"kev_count":17,"has_kev":18},"7.2.3",{"version":180,"cve_count":17,"kev_count":17,"has_kev":18},"7.2.4",{"version":182,"cve_count":17,"kev_count":17,"has_kev":18},"7.2.5",{"version":184,"cve_count":17,"kev_count":17,"has_kev":18},"7.2.6",{"version":186,"cve_count":17,"kev_count":17,"has_kev":18},"7.2.7",{"version":188,"cve_count":17,"kev_count":17,"has_kev":18},"7.2.8",{"version":190,"cve_count":17,"kev_count":17,"has_kev":18},"7.2.9",{"version":192,"cve_count":112,"kev_count":17,"has_kev":18},"7.4.0",{"version":194,"cve_count":81,"kev_count":17,"has_kev":18},"7.4.1",{"version":196,"cve_count":17,"kev_count":17,"has_kev":18},"7.4.10",{"version":198,"cve_count":17,"kev_count":17,"has_kev":18},"7.4.11",{"version":200,"cve_count":17,"kev_count":17,"has_kev":18},"7.4.12",{"version":202,"cve_count":17,"kev_count":17,"has_kev":18},"7.4.2",{"version":204,"cve_count":17,"kev_count":17,"has_kev":18},"7.4.3",{"version":206,"cve_count":17,"kev_count":17,"has_kev":18},"7.4.4",{"version":208,"cve_count":17,"kev_count":17,"has_kev":18},"7.4.5",{"version":210,"cve_count":17,"kev_count":17,"has_kev":18},"7.4.6",{"version":212,"cve_count":17,"kev_count":17,"has_kev":18},"7.4.8",{"version":214,"cve_count":17,"kev_count":17,"has_kev":18},"7.4.9",{"version":216,"cve_count":81,"kev_count":17,"has_kev":18},"7.6.0",{"version":218,"cve_count":17,"kev_count":17,"has_kev":18},"7.6.1",{"version":220,"cve_count":17,"kev_count":17,"has_kev":18},"7.6.2",{"version":222,"cve_count":17,"kev_count":17,"has_kev":18},"7.6.3",{"version":224,"cve_count":17,"kev_count":17,"has_kev":18},"7.6.4","Fortiproxy by Fortinet is a technology product with 101 tracked versions and 105 known security vulnerabilities including 11 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":17,"kev_count":17,"has_kev":18},{"version":22,"cve_count":17,"kev_count":17,"has_kev":18},{"version":24,"cve_count":17,"kev_count":17,"has_kev":18},{"version":26,"cve_count":17,"kev_count":17,"has_kev":18},{"version":28,"cve_count":17,"kev_count":17,"has_kev":18},{"version":30,"cve_count":17,"kev_count":17,"has_kev":18},{"version":32,"cve_count":17,"kev_count":17,"has_kev":18},{"version":34,"cve_count":16,"kev_count":17,"has_kev":18},{"version":36,"cve_count":17,"kev_count":17,"has_kev":18},{"version":38,"cve_count":17,"kev_count":17,"has_kev":18},{"version":40,"cve_count":17,"kev_count":17,"has_kev":18},{"version":42,"cve_count":17,"kev_count":17,"has_kev":18},{"version":44,"cve_count":16,"kev_count":17,"has_kev":18},{"version":46,"cve_count":16,"kev_count":17,"has_kev":18},{"version":48,"cve_count":16,"kev_count":17,"has_kev":18},{"version":50,"cve_count":17,"kev_count":17,"has_kev":18},{"version":52,"cve_count":17,"kev_count":17,"has_kev":18},{"version":54,"cve_count":17,"kev_count":17,"has_kev":18},{"version":56,"cve_count":17,"kev_count":17,"has_kev":18},{"version":58,"cve_count":17,"kev_count":17,"has_kev":18},{"version":60,"cve_count":17,"kev_count":17,"has_kev":18},{"version":62,"cve_count":17,"kev_count":17,"has_kev":18},{"version":64,"cve_count":17,"kev_count":17,"has_kev":18},{"version":66,"cve_count":17,"kev_count":17,"has_kev":18},{"version":68,"cve_count":17,"kev_count":17,"has_kev":18},{"version":70,"cve_count":17,"kev_count":17,"has_kev":18},{"version":72,"cve_count":17,"kev_count":17,"has_kev":18},{"version":74,"cve_count":17,"kev_count":17,"has_kev":18},{"version":76,"cve_count":77,"kev_count":78,"has_kev":4},{"version":80,"cve_count":81,"kev_count":17,"has_kev":18},{"version":83,"cve_count":17,"kev_count":17,"has_kev":18},{"version":85,"cve_count":17,"kev_count":17,"has_kev":18},{"version":87,"cve_count":17,"kev_count":17,"has_kev":18},{"version":89,"cve_count":17,"kev_count":17,"has_kev":18},{"version":91,"cve_count":17,"kev_count":17,"has_kev":18},{"version":93,"cve_count":17,"kev_count":17,"has_kev":18},{"version":95,"cve_count":17,"kev_count":17,"has_kev":18},{"version":97,"cve_count":17,"kev_count":17,"has_kev":18},{"version":99,"cve_count":17,"kev_count":17,"has_kev":18},{"version":101,"cve_count":17,"kev_count":17,"has_kev":18},{"version":103,"cve_count":17,"kev_count":17,"has_kev":18},{"version":105,"cve_count":17,"kev_count":17,"has_kev":18},{"version":107,"cve_count":17,"kev_count":17,"has_kev":18},{"version":109,"cve_count":17,"kev_count":17,"has_kev":18},{"version":111,"cve_count":112,"kev_count":17,"has_kev":18},{"version":114,"cve_count":81,"kev_count":17,"has_kev":18},{"version":116,"cve_count":17,"kev_count":17,"has_kev":18},{"version":118,"cve_count":17,"kev_count":17,"has_kev":18},{"version":120,"cve_count":17,"kev_count":17,"has_kev":18},{"version":122,"cve_count":17,"kev_count":17,"has_kev":18},{"version":124,"cve_count":17,"kev_count":17,"has_kev":18},{"version":126,"cve_count":17,"kev_count":17,"has_kev":18},{"version":128,"cve_count":17,"kev_count":17,"has_kev":18},{"version":130,"cve_count":17,"kev_count":17,"has_kev":18},{"version":132,"cve_count":17,"kev_count":17,"has_kev":18},{"version":134,"cve_count":17,"kev_count":17,"has_kev":18},{"version":136,"cve_count":17,"kev_count":17,"has_kev":18},{"version":138,"cve_count":17,"kev_count":17,"has_kev":18},{"version":140,"cve_count":17,"kev_count":17,"has_kev":18},{"version":142,"cve_count":17,"kev_count":17,"has_kev":18},{"version":144,"cve_count":17,"kev_count":17,"has_kev":18},{"version":146,"cve_count":17,"kev_count":17,"has_kev":18},{"version":148,"cve_count":17,"kev_count":17,"has_kev":18},{"version":150,"cve_count":17,"kev_count":17,"has_kev":18},{"version":152,"cve_count":17,"kev_count":17,"has_kev":18},{"version":154,"cve_count":17,"kev_count":17,"has_kev":18},{"version":156,"cve_count":17,"kev_count":17,"has_kev":18},{"version":158,"cve_count":159,"kev_count":16,"has_kev":4},{"version":161,"cve_count":162,"kev_count":17,"has_kev":18},{"version":164,"cve_count":17,"kev_count":17,"has_kev":18},{"version":166,"cve_count":17,"kev_count":17,"has_kev":18},{"version":168,"cve_count":17,"kev_count":17,"has_kev":18},{"version":170,"cve_count":17,"kev_count":17,"has_kev":18},{"version":172,"cve_count":17,"kev_count":17,"has_kev":18},{"version":174,"cve_count":17,"kev_count":17,"has_kev":18},{"version":176,"cve_count":112,"kev_count":17,"has_kev":18},{"version":178,"cve_count":16,"kev_count":17,"has_kev":18},{"version":180,"cve_count":17,"kev_count":17,"has_kev":18},{"version":182,"cve_count":17,"kev_count":17,"has_kev":18},{"version":184,"cve_count":17,"kev_count":17,"has_kev":18},{"version":186,"cve_count":17,"kev_count":17,"has_kev":18},{"version":188,"cve_count":17,"kev_count":17,"has_kev":18},{"version":190,"cve_count":17,"kev_count":17,"has_kev":18},{"version":192,"cve_count":112,"kev_count":17,"has_kev":18},{"version":194,"cve_count":81,"kev_count":17,"has_kev":18},{"version":196,"cve_count":17,"kev_count":17,"has_kev":18},{"version":198,"cve_count":17,"kev_count":17,"has_kev":18},{"version":200,"cve_count":17,"kev_count":17,"has_kev":18},{"version":202,"cve_count":17,"kev_count":17,"has_kev":18},{"version":204,"cve_count":17,"kev_count":17,"has_kev":18},{"version":206,"cve_count":17,"kev_count":17,"has_kev":18},{"version":208,"cve_count":17,"kev_count":17,"has_kev":18},{"version":210,"cve_count":17,"kev_count":17,"has_kev":18},{"version":212,"cve_count":17,"kev_count":17,"has_kev":18},{"version":214,"cve_count":17,"kev_count":17,"has_kev":18},{"version":216,"cve_count":81,"kev_count":17,"has_kev":18},{"version":218,"cve_count":17,"kev_count":17,"has_kev":18},{"version":220,"cve_count":17,"kev_count":17,"has_kev":18},{"version":222,"cve_count":17,"kev_count":17,"has_kev":18},{"version":224,"cve_count":17,"kev_count":17,"has_kev":18},[329,337,343,348,353,358,363,367,371,377],{"cveId":330,"description":331,"publishedDate":332,"cvssScore":333,"cvssVersion":334,"severity":335,"isKev":4,"epssScore":336},"CVE-2018-13379","An Improper Limitation of a Pathname to a Restricted Directory (\"Path Traversal\") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to download system files via special crafted HTTP resource requests.","2019-06-04",9.1,"v3.1","Critical",0.99999,{"cveId":338,"description":339,"publishedDate":340,"cvssScore":341,"cvssVersion":334,"severity":335,"isKev":4,"epssScore":342},"CVE-2022-40684","An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.","2022-10-18",9.8,0.99984,{"cveId":344,"description":345,"publishedDate":346,"cvssScore":341,"cvssVersion":334,"severity":335,"isKev":4,"epssScore":347},"CVE-2022-42475","A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier  and FortiProxy SSL-VPN 7.2.0 through 7.2.1, 7.0.7 and earlier may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.","2023-01-02",0.99474,{"cveId":349,"description":350,"publishedDate":351,"cvssScore":341,"cvssVersion":334,"severity":335,"isKev":4,"epssScore":352},"CVE-2024-55591","An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 through 7.0.16 and FortiProxy version 7.0.0 through 7.0.19 and 7.2.0 through 7.2.12 allows a remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.","2025-01-14",0.94149,{"cveId":354,"description":355,"publishedDate":356,"cvssScore":341,"cvssVersion":334,"severity":335,"isKev":4,"epssScore":357},"CVE-2023-27997","A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6.4.12 and below, version 6.0.16 and below and FortiProxy version 7.2.3 and below, version 7.0.9 and below, version 2.0.12 and below, version 1.2 all versions, version 1.1 all versions SSL-VPN may allow a remote attacker to execute arbitrary code or commands via specifically crafted requests.","2023-06-13",0.85689,{"cveId":359,"description":360,"publishedDate":361,"cvssScore":341,"cvssVersion":334,"severity":335,"isKev":4,"epssScore":362},"CVE-2024-21762","A out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, 6.0.0 through 6.0.17, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, 2.0.0 through 2.0.13, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7 allows attacker to execute unauthorized code or commands via specifically crafted requests","2024-02-09",0.83428,{"cveId":364,"description":365,"publishedDate":332,"cvssScore":333,"cvssVersion":334,"severity":335,"isKev":4,"epssScore":366},"CVE-2018-13382","An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5.4.1 to 5.4.10 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to modify the password of an SSL VPN web portal user via specially crafted HTTP requests",0.81691,{"cveId":368,"description":369,"publishedDate":12,"cvssScore":341,"cvssVersion":334,"severity":335,"isKev":4,"epssScore":370},"CVE-2025-59718","A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.10, FortiProxy 7.2.0 through 7.2.14, FortiProxy 7.0.0 through 7.0.21, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML response message.",0.68293,{"cveId":372,"description":373,"publishedDate":332,"cvssScore":374,"cvssVersion":334,"severity":375,"isKev":18,"epssScore":376},"CVE-2018-13380","A Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4.0 to 5.4.12, 5.2 and below and Fortinet FortiProxy 2.0.0, 1.2.8 and below under SSL VPN web portal allows attacker to execute unauthorized malicious script code via the error or message handling parameters.",6.1,"Medium",0.62474,{"cveId":378,"description":379,"publishedDate":380,"cvssScore":341,"cvssVersion":334,"severity":335,"isKev":4,"epssScore":381},"CVE-2024-23113","A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, FortiPAM versions 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiSwitchManager versions 7.2.0 through 7.2.3, 7.0.0 through 7.0.3 allows attacker to execute unauthorized code or commands via specially crafted packets.","2024-02-15",0.61725,[383,388,398,401,405,408,412,416,420,429,432],{"cveId":368,"description":369,"publishedDate":12,"cvssScore":341,"severity":335,"isKev":4,"epssScore":370,"cisaVulnName":384,"cisaDateAdded":385,"cisaShortDescription":386,"cisaRequiredAction":387},"Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability","2025-12-16","Fortinet FortiOS, FortiSwitchMaster, FortiProxy, and FortiWeb contain an improper verification of cryptographic signature vulnerability that may allow an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML message. Please be aware that CVE-2025-59719 pertains to the same problem and is mentioned in the same vendor advisory. Ensure to apply all patches mentioned in the advisory.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":389,"description":390,"publishedDate":391,"cvssScore":392,"severity":393,"isKev":4,"epssScore":394,"cisaVulnName":395,"cisaDateAdded":396,"cisaShortDescription":397,"cisaRequiredAction":387},"CVE-2025-24472","An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS 7.0.0 through 7.0.16 and FortiProxy 7.2.0 through 7.2.12, 7.0.0 through 7.0.19 may allow a remote unauthenticated attacker with prior knowledge of upstream and downstream devices serial numbers to gain super-admin privileges on the downstream device, if the Security Fabric is enabled, via crafted CSF proxy requests.","2025-02-11",8.1,"High",0.07235,"Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability","2025-03-18"," Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that allows a remote attacker to gain super-admin privileges via crafted CSF proxy requests.",{"cveId":349,"description":350,"publishedDate":351,"cvssScore":341,"severity":335,"isKev":4,"epssScore":352,"cisaVulnName":395,"cisaDateAdded":351,"cisaShortDescription":399,"cisaRequiredAction":400},"Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that may allow an unauthenticated, remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":378,"description":379,"publishedDate":380,"cvssScore":341,"severity":335,"isKev":4,"epssScore":381,"cisaVulnName":402,"cisaDateAdded":403,"cisaShortDescription":404,"cisaRequiredAction":400},"Fortinet Multiple Products Format String Vulnerability","2024-10-09","Fortinet FortiOS, FortiPAM, FortiProxy, and FortiWeb contain a format string vulnerability that allows a remote, unauthenticated attacker to execute arbitrary code or commands via specially crafted requests.",{"cveId":359,"description":360,"publishedDate":361,"cvssScore":341,"severity":335,"isKev":4,"epssScore":362,"cisaVulnName":406,"cisaDateAdded":361,"cisaShortDescription":407,"cisaRequiredAction":400},"Fortinet FortiOS Out-of-Bound Write Vulnerability","Fortinet FortiOS contains an out-of-bound write vulnerability that allows a remote unauthenticated attacker to execute code or commands via specially crafted HTTP requests.",{"cveId":354,"description":355,"publishedDate":356,"cvssScore":341,"severity":335,"isKev":4,"epssScore":357,"cisaVulnName":409,"cisaDateAdded":356,"cisaShortDescription":410,"cisaRequiredAction":411},"Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability","Fortinet FortiOS and FortiProxy SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attacker to execute code or commands via specifically crafted requests.","Apply updates per vendor instructions.",{"cveId":344,"description":345,"publishedDate":346,"cvssScore":341,"severity":335,"isKev":4,"epssScore":347,"cisaVulnName":413,"cisaDateAdded":414,"cisaShortDescription":415,"cisaRequiredAction":411},"Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability","2022-12-13","Multiple versions of Fortinet FortiOS SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attacker to execute arbitrary code or commands via specifically crafted requests.",{"cveId":338,"description":339,"publishedDate":340,"cvssScore":341,"severity":335,"isKev":4,"epssScore":342,"cisaVulnName":417,"cisaDateAdded":418,"cisaShortDescription":419,"cisaRequiredAction":411},"Fortinet Multiple Products Authentication Bypass Vulnerability","2022-10-11","Fortinet FortiOS, FortiProxy, and FortiSwitchManager contain an authentication bypass vulnerability that could allow an unauthenticated attacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.",{"cveId":421,"description":422,"publishedDate":423,"cvssScore":424,"severity":375,"isKev":4,"epssScore":425,"cisaVulnName":426,"cisaDateAdded":427,"cisaShortDescription":428,"cisaRequiredAction":411},"CVE-2018-13383","A heap buffer overflow in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.10, 5.4.0 through 5.4.12, 5.2.14 and earlier and FortiProxy 2.0.0, 1.2.8 and earlier in the SSL VPN web portal may cause the SSL VPN web service termination for logged in users due to a failure to properly handle javascript href data when proxying webpages.","2019-05-29",4.3,0.33647,"Fortinet FortiOS and FortiProxy Out-of-bounds Write","2022-01-10","A heap buffer overflow in Fortinet FortiOS and FortiProxy may cause the SSL VPN web service termination for logged in users.",{"cveId":364,"description":365,"publishedDate":332,"cvssScore":333,"severity":335,"isKev":4,"epssScore":366,"cisaVulnName":430,"cisaDateAdded":427,"cisaShortDescription":431,"cisaRequiredAction":411},"Fortinet FortiOS and FortiProxy Improper Authorization","An Improper Authorization vulnerability in Fortinet FortiOS and FortiProxy under SSL VPN web portal allows an unauthenticated attacker to modify the password.",{"cveId":330,"description":331,"publishedDate":332,"cvssScore":333,"severity":335,"isKev":4,"epssScore":336,"cisaVulnName":433,"cisaDateAdded":434,"cisaShortDescription":435,"cisaRequiredAction":411},"Fortinet FortiOS SSL VPN Path Traversal Vulnerability","2021-11-03","Fortinet FortiOS SSL VPN web portal contains a path traversal vulnerability that may allow an unauthenticated attacker to download FortiOS system files through specially crafted HTTP resource requests.",{"title":437,"metaDescription":438,"keywords":439,"structuredData":440},"Fortiproxy by Fortinet - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Fortiproxy by Fortinet covering 101 versions with 105 tracked vulnerabilities including 9 critical and 1 high-severity issues and 11 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Fortiproxy vulnerabilities, Fortiproxy security, Fortiproxy CVE, Fortinet Fortiproxy, Fortiproxy threat intelligence, Fortinet security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Fortiproxy KEV, Fortiproxy exploited vulnerabilities",{"@context":441,"@type":442,"name":443,"description":438,"url":444,"manufacturer":445,"applicationCategory":449,"softwareVersion":450,"mainEntity":451},"https:\u002F\u002Fschema.org","SoftwareApplication","Fortiproxy","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Ffortinet\u002Ffortiproxy",{"@type":446,"name":447,"url":448},"Organization","Fortinet","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ffortinet","Security Software","101 versions tracked",{"@type":452,"name":453,"description":454,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Fortiproxy Security Vulnerabilities","Security vulnerabilities affecting Fortiproxy by Fortinet",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":456,"apiVersion":457},"2026-10-18T12:28:11.024Z","3.0",[],{"rows":460,"total":11,"capped":18,"failed":17},[461,469,475,479,486,494,503,511,516,521,525],{"cveId":368,"name":384,"severity":335,"cvss":341,"added":385,"epss":370,"published":462,"ranges":463,"checked":4,"hits":468,"covers":18},"2025-12-09T18:15:54.983",[464,465,466,467],"7.0.0 to 7.0.21","7.2.0 to 7.2.14","7.4.0 to 7.4.10","7.6.0 to 7.6.3",[],{"cveId":389,"name":395,"severity":393,"cvss":392,"added":396,"epss":394,"published":470,"ranges":471,"checked":4,"hits":474,"covers":18},"2025-02-11T17:15:34.867",[472,473],"7.0.0 to before 7.0.20","7.2.0 to before 7.2.13",[],{"cveId":349,"name":395,"severity":335,"cvss":341,"added":351,"epss":352,"published":476,"ranges":477,"checked":4,"hits":478,"covers":18},"2025-01-14T14:15:34.45",[472,473],[],{"cveId":378,"name":402,"severity":335,"cvss":341,"added":403,"epss":381,"published":480,"ranges":481,"checked":4,"hits":485,"covers":18},"2024-02-15T14:15:46.503",[482,483,484],"7.0.0 to 7.0.14","7.2.0 to 7.2.8","7.4.0 to 7.4.2",[],{"cveId":359,"name":406,"severity":335,"cvss":341,"added":361,"epss":362,"published":487,"ranges":488,"checked":4,"hits":493,"covers":18},"2024-02-09T09:15:08.087",[489,490,491,492],"1.0.0 to before 2.0.14","7.0.0 to before 7.0.15","7.2.0 to before 7.2.9","7.4.0 to before 7.4.3",[],{"cveId":354,"name":409,"severity":335,"cvss":341,"added":356,"epss":357,"published":495,"ranges":496,"checked":4,"hits":502,"covers":18},"2023-06-13T09:15:16.613",[497,498,499,500,501],"1.1.0 to 1.1.6","1.2.0 to 1.2.13","2.0.0 to 2.0.12","7.0.0 to 7.0.9","7.2.0 to 7.2.3",[],{"cveId":344,"name":413,"severity":335,"cvss":341,"added":414,"epss":347,"published":504,"ranges":505,"checked":4,"hits":510,"covers":18},"2023-01-02T09:15:09.49",[506,497,498,507,508,509],"1.0.0 to 1.0.7","2.0.0 to before 2.0.12","7.0.0 to before 7.0.8","7.2.0 to before 7.2.2",[],{"cveId":338,"name":417,"severity":335,"cvss":341,"added":418,"epss":342,"published":512,"ranges":513,"checked":4,"hits":515,"covers":18},"2022-10-18T14:15:09.747",[514,158],"7.0.0 to before 7.0.7",[],{"cveId":421,"name":426,"severity":375,"cvss":424,"added":427,"epss":425,"published":517,"ranges":518,"checked":4,"hits":520,"covers":18},"2019-05-29T18:29:00.693",[519,76],"before 1.2.9",[],{"cveId":364,"name":430,"severity":335,"cvss":333,"added":427,"epss":366,"published":522,"ranges":523,"checked":4,"hits":524,"covers":18},"2019-06-04T21:29:00.373",[519,76],[],{"cveId":330,"name":433,"severity":335,"cvss":333,"added":434,"epss":336,"published":526,"ranges":527,"checked":4,"hits":528,"covers":18},"2019-06-04T21:29:00.233",[519,76],[]]