Known vulnerabilities in FortiProxy

Software: FortiProxy
Software CPE: cpe:2.3:h:fortinet:fortiproxy:*:*:*:*:*:*:*:*
Total vulnerabilities: 122
Public exploits: 13
Known exploited (KEV): 12
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiProxy FortiProxy is affected by 122 known vulnerabilities: 7 critical, 19 high, 38 medium, 58 low Critical High Medium Low

Vulnerabilities (122)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137531 - Buffer over-read
CVE-2026-59840
CWE-126 Low
No
No
7.4.14, 7.6.6 14.07.2026 SB20260714106
#VU137532 - Buffer over-read
CVE-2025-43892
CWE-126 Low
No
No
7.4.14, 7.6.6 14.07.2026 SB20260714106
#VU137530 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2025-62826
CWE-113 Low
No
No
7.6.5 14.07.2026 SB20260714105
#VU137529 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2025-62675
CWE-113 Low
No
No
7.6.5 14.07.2026 SB2026071497
#VU137528 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-59839
CWE-22 Low
No
No
7.4.14, 7.6.6 14.07.2026 SB2026071496
#VU137527 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-23573
CWE-79 Medium
No
No
7.2.10, 7.4.4 14.07.2026 SB2026071494
#VU137525 - Stack-based buffer overflow
CVE-2026-59837
CWE-121 Low
No
No
7.4.14 14.07.2026 SB2026071492
#VU134005 - Internal Asset Exposed to Unsafe Debug Access Level or State
CVE-2025-67862
CWE-1244 Low
No
No
7.2.15, 7.4.11, 7.6.4 09.06.2026 SB2026060945
#VU133362 - Resource exhaustion
CVE-2026-49975
CWE-400 High
No
No
7.4.15, 7.6.7 04.06.2026 SB2026060491
SB2026060492
SB2026060493
and 28 more
#VU126001 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-61624
CWE-22 High
No
Exploited
7.4.12, 7.6.5 14.04.2026 SB20260414125
#VU121971 - Improper Verification of Cryptographic Signature
CVE-2026-24858
CWE-347 Critical
Available
Exploited
7.4.13, 7.6.6 23.01.2026 SB2026012392
#VU119696 - Improper Verification of Cryptographic Signature
CVE-2025-59719
CWE-347 Critical
Available
Exploited
7.0.22, 7.2.15, 7.4.11, 7.6.4 10.12.2025 SB2025121064
#VU119694 - Improper Verification of Cryptographic Signature
CVE-2025-59718
CWE-347 Critical
Available
Exploited
7.0.22, 7.2.15, 7.4.11, 7.6.4 10.12.2025 SB2025121064
#VU119482 - Information Exposure Through Log Files
CVE-2024-47570
CWE-532 Low
No
No
7.2.12, 7.4.4 09.12.2025 SB2025120983
#VU118604 - Improper Privilege Management
CVE-2025-54821
CWE-269 Low
No
No
7.6.4 18.11.2025 SB2025111873
#VU117646 - Use of Uninitialized Resource
CVE-2023-37930
CWE-908 Medium
No
No
7.0.13, 7.2.7, 7.4.0 24.10.2025 SB2025102464
#VU117428 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2025-47890
CWE-601 Low
No
No
7.6.4 21.10.2025 SB2025102162
#VU117426 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-31366
CWE-79 Low
No
No
7.6.4 21.10.2025 SB2025102162
#VU117217 - Stack-based buffer overflow
CVE-2023-46718
CWE-121 Low
No
No
7.4.8 15.10.2025 SB2025101576
#VU117216 - Improper Validation of Certificate with Host Mismatch
CVE-2025-25253
CWE-297 Medium
No
No
7.4.9, 7.6.2 15.10.2025 SB2025101575


Showing elements 1 - 20 out of 122