Known vulnerabilities in FortiProxy - page 5

Vendor: Fortinet, Inc
Software: FortiProxy
Software CPE: cpe:2.3:h:fortinet:fortiproxy:*:*:*:*:*:*:*:*
Website: https://www.fortinet.com/
Total vulnerabilities: 122
Public exploits: 13
Known exploited (KEV): 12
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiProxy FortiProxy is affected by 122 known vulnerabilities: 7 critical, 19 high, 38 medium, 58 low Critical High Medium Low

Vulnerabilities (122)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77181 - Improper Certificate Validation
CVE-2023-29175		 CWE-295 Medium
No
No
 7.0.10, 7.2.4 13.06.2023 SB2023061316
SB2024031818
#VU77180 - Out-of-bounds write
CVE-2023-22639		 CWE-787 Low
No
No
 7.0.9, 7.2.3 13.06.2023 SB2023061315
SB2024031818
#VU77179 - Access of Uninitialized Pointer
CVE-2023-29178		 CWE-824 Low
No
No
 7.0.10, 7.2.4 13.06.2023 SB2023061314
SB2024031818
#VU77175 - Heap-based Buffer Overflow
CVE-2023-27997		 CWE-122 Critical
Available
Exploited
 2.0.13, 7.0.10, 7.2.4 13.06.2023 SB2023061310
SB2024031818
#VU75734 - Out-of-bounds write
CVE-2023-22640		 CWE-787 High
No
No
 7.0.8, 7.2.2 04.05.2023 SB2023050443
SB2024031818
#VU74858 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-41330		 CWE-79 Medium
No
No
 7.0.8, 7.2.2 11.04.2023 SB2023041141
SB2024031818
#VU74856 - Improper Restriction of Excessive Authentication Attempts
CVE-2022-43947		 CWE-307 Medium
No
No
 7.0.8, 7.2.2 11.04.2023 SB2023041140
SB2024031818
#VU74852 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-22641		 CWE-601 Low
No
No
 7.0.9, 7.2.3 11.04.2023 SB2023041139
SB2024031818
#VU73208 - Improper Access Control
CVE-2022-41329		 CWE-284 Medium
No
No
 7.0.9, 7.2.3 09.03.2023 SB2023030933
SB2024031818
#VU73201 - NULL Pointer Dereference
CVE-2022-45861		 CWE-476 Medium
No
No
 2.0.12, 7.0.8, 7.2.2 09.03.2023 SB2023030927
SB2024031818
#VU73200 - Buffer Underwrite ('Buffer Underflow')
CVE-2023-25610		 CWE-124 High
Available
No
 2.0.12, 7.0.9, 7.2.3 09.03.2023 SB2023030926
SB2024031818
#VU72349 - Missing Required Cryptographic Step
CVE-2022-29054		 CWE-325 Low
No
No
 7.0.8, 7.2.2 17.02.2023 SB2023021707
SB2023021711
#VU72348 - Improper Privilege Management
CVE-2022-38378		 CWE-269 Low
No
No
 7.0.8, 7.2.2 17.02.2023 SB2023021707
SB2023021711
#VU72347 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2022-42472		 CWE-113 Low
No
No
 2.0.11, 7.0.8, 7.2.2 17.02.2023 SB2023021709
SB2023021711
#VU72346 - Improper Verification of Cryptographic Signature
CVE-2021-43074		 CWE-347 Low
No
No
 2.0.8, 7.0.7 17.02.2023 SB2023021703
SB2023021704
SB2023021705
and 1 more
#VU72345 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-41335		 CWE-22 Medium
No
No
 2.0.11, 7.0.8, 7.2.2 17.02.2023 SB2023021709
SB2023021711
SB2023021712
#VU72344 - Improper Certificate Validation
CVE-2022-39948		 CWE-295 Medium
No
No
 7.0.7 17.02.2023 SB2023021710
SB2023021713
SB2024031818
#VU69939 - Improper Authentication
CVE-2022-35843		 CWE-287 High
No
No
 2.0.11, 7.0.7 06.12.2022 SB2022120634
SB2022120635
#VU68099 - NULL Pointer Dereference
CVE-2022-29055		 CWE-476 Medium
No
No
 2.0.10, 7.0.7, 7.2.1 10.10.2022 SB2022101024
#VU61110 - Use of Uninitialized Resource
CVE-2022-0847		 CWE-908 Low
Available
Exploited
 7.0.4 08.03.2022 SB2022030808
SB2022031019
SB2022031026
and 27 more


Showing elements 81 - 100 out of 122