Known vulnerabilities in FortiProxy 1.2.4

Software: FortiProxy
Version: 1.2.4
Software CPE: cpe:2.3:h:fortinet:fortiproxy:*:*:*:*:*:*:*:*
Total vulnerabilities: 46
Public exploits: 4
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting FortiProxy version 1.2.4 FortiProxy 1.2.4 is affected by 46 vulnerabilities: 1 critical, 6 high, 16 medium, 23 low Critical High Medium Low

Vulnerabilities (46)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117148 - Insertion of Sensitive Information Into Sent Data
CVE-2024-47569
CWE-201 Low
No
No
7.2.11, 7.4.5 15.10.2025 SB2025101507
#VU117134 - Heap-based Buffer Overflow
CVE-2024-50571
CWE-122 Low
No
No
7.0.20, 7.2.13, 7.4.8, 7.6.2 14.10.2025 SB20251014106
#VU117130 - Improper Check or Handling of Exceptional Conditions
CVE-2024-26008
CWE-703 Medium
No
No
7.2.10, 7.4.4 14.10.2025 SB20251014102
#VU111042 - Incomplete cleanup
CVE-2023-29184
CWE-459 Low
No
No
7.0.9, 7.2.3 11.06.2025 SB2025061107
#VU103885 - Use of Externally-Controlled Format String
CVE-2023-40721
CWE-134 Low
No
No
7.2.8, 7.4.1 12.02.2025 SB2025021205
SB2025021206
SB2025021207
and 1 more
#VU102875 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-48885
CWE-22 Medium
No
No
7.0.19, 7.2.12, 7.4.6 16.01.2025 SB2025011650
SB2025011651
SB2025011652
and 3 more
#VU102874 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-48884
CWE-22 Low
No
No
7.0.19, 7.2.12, 7.4.6 16.01.2025 SB2025011650
SB2025011651
SB2025011652
and 3 more
#VU100401 - Improper Authentication
CVE-2024-26011
CWE-287 Medium
No
No
7.2.10, 7.4.4 12.11.2024 SB20241112152
SB20241112154
SB20241112155
and 3 more
#VU89658 - Use of Externally-Controlled Format String
CVE-2023-45583
CWE-134 Low
No
No
7.0.12, 7.2.6 20.05.2024 SB2024052014
#VU89656 - Use of Externally-Controlled Format String
CVE-2023-36640
CWE-134 Low
No
No
7.0.12, 7.2.6 20.05.2024 SB2024052014
#VU88233 - Insufficiently Protected Credentials
CVE-2023-41677
CWE-522 Medium
No
No
7.0.14, 7.2.8, 7.4.2 09.04.2024 SB2024040954
#VU83247 - NULL Pointer Dereference
CVE-2023-36641
CWE-476 Medium
No
No
7.0.11, 7.2.5 17.11.2023 SB2023111732
SB2024031818
#VU77961 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-42474
CWE-22 Low
No
No
2.0.12, 7.0.8, 7.2.2 05.07.2023 SB2023070507
SB2024031818
#VU77959 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-33305
CWE-835 Low
No
No
7.0.10, 7.2.4 05.07.2023 SB2023070504
SB2024031818
#VU77181 - Improper Certificate Validation
CVE-2023-29175
CWE-295 Medium
No
No
7.0.10, 7.2.4 13.06.2023 SB2023061316
SB2024031818
#VU77180 - Out-of-bounds write
CVE-2023-22639
CWE-787 Low
No
No
7.0.9, 7.2.3 13.06.2023 SB2023061315
SB2024031818
#VU77179 - Access of Uninitialized Pointer
CVE-2023-29178
CWE-824 Low
No
No
7.0.10, 7.2.4 13.06.2023 SB2023061314
SB2024031818
#VU77175 - Heap-based Buffer Overflow
CVE-2023-27997
CWE-122 Critical
Public exploit available
Exploited
2.0.13, 7.0.10, 7.2.4 13.06.2023 SB2023061310
SB2024031818
#VU75734 - Out-of-bounds write
CVE-2023-22640
CWE-787 High
No
No
7.0.8, 7.2.2 04.05.2023 SB2023050443
SB2024031818
#VU74856 - Improper Restriction of Excessive Authentication Attempts
CVE-2022-43947
CWE-307 Medium
No
No
7.0.8, 7.2.2 11.04.2023 SB2023041140
SB2024031818


Showing elements 1 - 20 out of 46