Known vulnerabilities in FortiProxy - page 4

Software: FortiProxy
Software CPE: cpe:2.3:h:fortinet:fortiproxy:*:*:*:*:*:*:*:*
Total vulnerabilities: 122
Public exploits: 13
Known exploited (KEV): 12
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiProxy FortiProxy is affected by 122 known vulnerabilities: 7 critical, 19 high, 38 medium, 58 low Critical High Medium Low

Vulnerabilities (122)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU88233 - Insufficiently Protected Credentials
CVE-2023-41677
CWE-522 Medium
No
No
7.0.14, 7.2.8, 7.4.2 09.04.2024 SB2024040954
#VU87581 - NULL Pointer Dereference
CVE-2023-33307
CWE-476 Medium
No
No
7.0.9, 7.2.3 18.03.2024 SB2023061647
SB2024031818
#VU87498 - Stack-based buffer overflow
CVE-2023-42790
CWE-121 High
No
No
2.0.14, 7.0.13, 7.2.7, 7.4.1 13.03.2024 SB2024031331
#VU87497 - Out-of-bounds write
CVE-2023-42789
CWE-787 High
No
No
2.0.14, 7.0.13, 7.2.7, 7.4.1 13.03.2024 SB2024031331
#VU87358 - Authorization Bypass Through User-Controlled Key
CVE-2024-23112
CWE-639 Low
No
No
7.0.15, 7.2.9, 7.4.3 12.03.2024 SB20240312305
#VU85208 - Improper Privilege Management
CVE-2023-44250
CWE-269 Medium
No
No
7.4.2 09.01.2024 SB2024010969
SB2024031338
#VU84439 - Use of Externally-Controlled Format String
CVE-2023-36639
CWE-134 Medium
No
No
7.0.11, 7.2.5 14.12.2023 SB2023121476
SB2024031818
#VU84435 - Improper Access Control
CVE-2023-47536
CWE-284 Low
No
No
2.0.13, 7.0.10, 7.2.4 14.12.2023 SB2023121449
#VU83247 - NULL Pointer Dereference
CVE-2023-36641
CWE-476 Medium
No
No
7.0.11, 7.2.5 17.11.2023 SB2023111732
SB2024031818
#VU83246 - Improper Validation of Integrity Check Value
CVE-2023-28002
CWE-354 Low
No
No
- 17.11.2023 SB2023111731
SB2024031818
#VU81928 - Use After Free
CVE-2023-41675
CWE-416 Medium
No
No
7.0.9, 7.2.3 11.10.2023 SB2023101195
SB2024031818
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Available
Exploited
7.2.8, 7.4.2 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more
#VU80761 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-29183
CWE-79 Medium
No
No
7.0.11, 7.2.5 13.09.2023 SB2023091362
SB2024031818
#VU78112 - Stack-based buffer overflow
CVE-2023-33308
CWE-121 Critical
No
No
7.0.10, 7.2.3 11.07.2023 SB2023071176
SB2024031818
#VU77961 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-42474
CWE-22 Low
No
No
2.0.12, 7.0.8, 7.2.2 05.07.2023 SB2023070507
SB2024031818
#VU77960 - Cleartext Transmission of Sensitive Information
CVE-2022-41327
CWE-319 Low
No
No
7.0.8, 7.2.2 05.07.2023 SB2023070506
SB2024031818
#VU77959 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-33305
CWE-835 Low
No
No
7.0.10, 7.2.4 05.07.2023 SB2023070504
SB2024031818
#VU77494 - NULL Pointer Dereference
CVE-2023-33306
CWE-476 Medium
No
No
7.0.9, 7.2.3 16.06.2023 SB2023061647
SB2024031818
#VU77183 - Information Exposure Through Log Files
CVE-2023-26207
CWE-532 Low
No
No
7.2.2 13.06.2023 SB2023061318
SB2024031818
#VU77182 - Use of Externally-Controlled Format String
CVE-2022-43953
CWE-134 Low
No
No
7.0.8, 7.2.2 13.06.2023 SB2023061317
SB2024031818


Showing elements 61 - 80 out of 122