Known vulnerabilities in FortiProxy - page 3

Software: FortiProxy
Software CPE: cpe:2.3:h:fortinet:fortiproxy:*:*:*:*:*:*:*:*
Total vulnerabilities: 122
Public exploits: 13
Known exploited (KEV): 12
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiProxy FortiProxy is affected by 122 known vulnerabilities: 7 critical, 19 high, 38 medium, 58 low Critical High Medium Low

Vulnerabilities (122)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU107250 - Improper Restriction of Communication Channel to Intended Endpoints
CVE-2024-50565
CWE-923 High
No
No
7.0.16, 7.2.10, 7.4.3 09.04.2025 SB2025040907
SB2025040908
SB2025040909
and 3 more
#VU107249 - Improper Restriction of Communication Channel to Intended Endpoints
CVE-2024-26013
CWE-923 High
No
No
7.0.16, 7.2.10, 7.4.3 09.04.2025 SB2025040907
SB2025040908
SB2025040909
and 3 more
#VU105622 - Use of Externally-Controlled Format String
CVE-2024-45324
CWE-134 Low
No
No
7.0.20, 7.2.13, 7.4.7, 7.6.1 12.03.2025 SB2025031208
SB2025031209
SB2025031210
and 2 more
#VU103885 - Use of Externally-Controlled Format String
CVE-2023-40721
CWE-134 Low
No
No
7.2.8, 7.4.1 12.02.2025 SB2025021205
SB2025021206
SB2025021207
and 1 more
#VU102875 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-48885
CWE-22 Medium
No
No
7.0.19, 7.2.12, 7.4.6 16.01.2025 SB2025011650
SB2025011651
SB2025011652
and 3 more
#VU102874 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-48884
CWE-22 Low
No
No
7.0.19, 7.2.12, 7.4.6 16.01.2025 SB2025011650
SB2025011651
SB2025011652
and 3 more
#VU102595 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2024-54021
CWE-113 Medium
No
No
7.2.12, 7.4.6 14.01.2025 SB2025011435
#VU102593 - Authentication Bypass Using an Alternate Path or Channel
CVE-2024-55591
CWE-288 Critical
Available
Exploited
7.0.20, 7.2.13 14.01.2025 SB2025011431
#VU100595 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2024-33510
CWE-74 Low
No
No
7.0.17, 7.2.10, 7.4.4 18.11.2024 SB2024111836
#VU100401 - Improper Authentication
CVE-2024-26011
CWE-287 Medium
No
No
7.2.10, 7.4.4 12.11.2024 SB20241112152
SB20241112154
SB20241112155
and 3 more
#VU96013 - Insufficient Session Expiration
CVE-2022-45862
CWE-613 Low
No
No
7.4.0 14.08.2024 SB2024081474
#VU94063 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2024-3596
CWE-327 Medium
Available
No
7.4.6 10.07.2024 SB2024071018
SB2024071019
SB2024071020
and 114 more
#VU94004 - Incorrect Calculation
CVE-2024-26015
CWE-682 Low
No
No
7.4.4 09.07.2024 SB20240709118
#VU93943 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-26006
CWE-79 Low
No
No
7.0.17, 7.2.10, 7.4.4 09.07.2024 SB2024070992
#VU91783 - Use of Password Hash With Insufficient Computational Effort
CVE-2024-21754
CWE-916 Low
No
No
7.4.3 11.06.2024 SB20240611283
#VU91763 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-23111
CWE-79 Low
No
No
7.0.15, 7.2.9, 7.4.3 11.06.2024 SB20240611277
#VU91760 - Stack-based buffer overflow
CVE-2024-26010
CWE-121 Medium
No
No
7.2.10, 7.4.4 11.06.2024 SB20240611274
#VU89658 - Use of Externally-Controlled Format String
CVE-2023-45583
CWE-134 Low
No
No
7.0.12, 7.2.6 20.05.2024 SB2024052014
#VU89656 - Use of Externally-Controlled Format String
CVE-2023-36640
CWE-134 Low
No
No
7.0.12, 7.2.6 20.05.2024 SB2024052014
#VU89599 - Insufficient Verification of Data Authenticity
CVE-2023-45586
CWE-345 Low
No
No
7.0.14, 7.2.8, 7.4.2 16.05.2024 SB2024051626


Showing elements 41 - 60 out of 122