Known vulnerabilities in FortiProxy 1.2.4 - page 2

Software: FortiProxy
Version: 1.2.4
Software CPE: cpe:2.3:h:fortinet:fortiproxy:*:*:*:*:*:*:*:*
Total vulnerabilities: 46
Public exploits: 4
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting FortiProxy version 1.2.4 FortiProxy 1.2.4 is affected by 46 vulnerabilities: 1 critical, 6 high, 16 medium, 23 low Critical High Medium Low

Vulnerabilities (46)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU74852 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-22641
CWE-601 Low
No
No
7.0.9, 7.2.3 11.04.2023 SB2023041139
SB2024031818
#VU73201 - NULL Pointer Dereference
CVE-2022-45861
CWE-476 Medium
No
No
2.0.12, 7.0.8, 7.2.2 09.03.2023 SB2023030927
SB2024031818
#VU73200 - Buffer Underwrite ('Buffer Underflow')
CVE-2023-25610
CWE-124 High
Public exploit available
No
2.0.12, 7.0.9, 7.2.3 09.03.2023 SB2023030926
SB2024031818
#VU72349 - Missing Required Cryptographic Step
CVE-2022-29054
CWE-325 Low
No
No
7.0.8, 7.2.2 17.02.2023 SB2023021707
SB2023021711
#VU72348 - Improper Privilege Management
CVE-2022-38378
CWE-269 Low
No
No
7.0.8, 7.2.2 17.02.2023 SB2023021707
SB2023021711
#VU72347 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2022-42472
CWE-113 Low
No
No
2.0.11, 7.0.8, 7.2.2 17.02.2023 SB2023021709
SB2023021711
#VU72346 - Improper Verification of Cryptographic Signature
CVE-2021-43074
CWE-347 Low
No
No
2.0.8, 7.0.7 17.02.2023 SB2023021703
SB2023021704
SB2023021705
and 1 more
#VU72345 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-41335
CWE-22 Medium
No
No
2.0.11, 7.0.8, 7.2.2 17.02.2023 SB2023021709
SB2023021711
SB2023021712
#VU72344 - Improper Certificate Validation
CVE-2022-39948
CWE-295 Medium
No
No
7.0.7 17.02.2023 SB2023021710
SB2023021713
SB2024031818
#VU65981 - Use of Externally-Controlled Format String
CVE-2022-22299
CWE-134 Low
No
No
2.0.8, 7.0.2 02.08.2022 SB2022080233
SB2022080234
SB2022080235
and 1 more
#VU64934 - Memory corruption
CVE-2021-43072
CWE-119 Low
No
No
2.0.9, 7.0.4 05.07.2022 SB2022070525
SB2022070526
SB2022070527
and 1 more
#VU64930 - Integer overflow
CVE-2021-42755
CWE-190 Medium
No
No
2.0.7, 7.0.1 05.07.2022 SB2022070514
SB2022070515
SB2022070516
and 2 more
#VU64929 - Stack-based buffer overflow
CVE-2021-44170
CWE-121 Low
No
No
2.0.8 05.07.2022 SB2022070512
SB2022070513
#VU58630 - Improper Access Control
CVE-2021-26110
CWE-284 Low
No
No
1.2.10, 2.0.2 07.12.2021 SB2021120717
#VU58629 - Cross-Site Request Forgery (CSRF)
CVE-2021-26103
CWE-352 Medium
No
No
1.2.12, 2.0.4 07.12.2021 SB2021120716
#VU53717 - Stack-based buffer overflow
CVE-2021-22130
CWE-121 Medium
No
No
1.2.10, 2.0.2 01.06.2021 SB2021060123
#VU51943 - Stack-based buffer overflow
CVE-2019-17656
CWE-121 Medium
No
No
1.2.10, 2.0.2 06.04.2021 SB2021040619
#VU46818 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-15706
CWE-79 Low
No
No
1.2.10, 2.0.1 18.09.2020 SB2020091804
SB2021050508
#VU18609 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-13379
CWE-22 High
Public exploit available
Exploited
1.2.9, 2.0.1 27.05.2019 SB2019052703
SB2021060121
#VU18607 - Improper Authorization
CVE-2018-13382
CWE-285 High
Public exploit available
Exploited
1.2.9, 2.0.1 27.05.2019 SB2019052702
SB2021060122


Showing elements 21 - 40 out of 46