Known vulnerabilities in FortiProxy - page 6

Software: FortiProxy
Software CPE: cpe:2.3:h:fortinet:fortiproxy:*:*:*:*:*:*:*:*
Total vulnerabilities: 122
Public exploits: 13
Known exploited (KEV): 12
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiProxy FortiProxy is affected by 122 known vulnerabilities: 7 critical, 19 high, 38 medium, 58 low Critical High Medium Low

Vulnerabilities (122)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68070 - Authentication Bypass Using an Alternate Path or Channel
CVE-2022-40684
CWE-288 Critical
Available
Exploited
7.0.7, 7.2.1 08.10.2022 SB2022100806
SB2022101028
#VU65981 - Use of Externally-Controlled Format String
CVE-2022-22299
CWE-134 Low
No
No
2.0.8, 7.0.2 02.08.2022 SB2022080233
SB2022080234
SB2022080235
and 1 more
#VU64934 - Memory corruption
CVE-2021-43072
CWE-119 Low
No
No
2.0.9, 7.0.4 05.07.2022 SB2022070525
SB2022070526
SB2022070527
and 1 more
#VU64930 - Integer overflow
CVE-2021-42755
CWE-190 Medium
No
No
2.0.7, 7.0.1 05.07.2022 SB2022070514
SB2022070515
SB2022070516
and 2 more
#VU64929 - Stack-based buffer overflow
CVE-2021-44170
CWE-121 Low
No
No
2.0.8 05.07.2022 SB2022070512
SB2022070513
#VU62772 - Exposure of sensitive information to an unauthorized actor
CVE-2021-43206
CWE-200 Medium
No
No
2.0.9, 7.0.2 03.05.2022 SB2022050316
SB2022050318
#VU62770 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-43081
CWE-79 Medium
No
No
2.0.8, 7.0.2 03.05.2022 SB2022050316
SB2022050317
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778
CWE-835 Medium
Available
No
- 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more
#VU58631 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-41024
CWE-22 Medium
No
No
7.0.1 07.12.2021 SB2021120718
#VU58630 - Improper Access Control
CVE-2021-26110
CWE-284 Low
No
No
1.2.10, 2.0.2 07.12.2021 SB2021120717
#VU58629 - Cross-Site Request Forgery (CSRF)
CVE-2021-26103
CWE-352 Medium
No
No
1.2.12, 2.0.4 07.12.2021 SB2021120716
#VU53717 - Stack-based buffer overflow
CVE-2021-22130
CWE-121 Medium
No
No
1.2.10, 2.0.2 01.06.2021 SB2021060123
#VU51943 - Stack-based buffer overflow
CVE-2019-17656
CWE-121 Medium
No
No
1.2.10, 2.0.2 06.04.2021 SB2021040619
#VU51226 - Cleartext Storage of Sensitive Information
CVE-2020-6648
CWE-312 Low
No
No
1.2.10, 2.0.1 04.03.2021 SB2020101917
SB2021030421
#VU51224 - Improper Access Control
CVE-2021-22128
CWE-284 Medium
No
No
1.2.10, 2.0.1 04.03.2021 SB2021030421
#VU46818 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-15706
CWE-79 Low
No
No
1.2.10, 2.0.1 18.09.2020 SB2020091804
SB2021050508
#VU30254 - Cleartext Storage of Sensitive Information
CVE-2019-17655
CWE-312 Medium
No
No
1.2.10, 2.0.1 16.06.2020 SB2020061621
SB2021030421
#VU18609 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-13379
CWE-22 High
Available
Exploited
1.2.9, 2.0.1 27.05.2019 SB2019052703
SB2021060121
#VU18608 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-13380
CWE-79 Low
No
No
1.2.9, 2.0.1 27.05.2019 SB2019052701
SB2021030421
#VU18607 - Improper Authorization
CVE-2018-13382
CWE-285 High
Available
Exploited
1.2.9, 2.0.1 27.05.2019 SB2019052702
SB2021060122


Showing elements 101 - 120 out of 122