CVE Intelligence

Fortinet Fortinet FortiOS, FortiProxy vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Fortinet Fortinet FortiOS, FortiProxy: 2 record(s), with affected versions and fixes.

CVE-2018-13379 Critical · 9.8 KEV Urgent · 100 Public exploit Ransomware CWE-22 Jun 4, 2019
Fortinet FortiOS SSL VPN Path Traversal Vulnerability
An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to download system files via special crafted HTTP resource requests.
CVE-2018-13382 High · 7.5 KEV Urgent · 83 Public exploit Ransomware CWE-863 Jun 4, 2019
Fortinet FortiOS and FortiProxy Improper Authorization
An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5.4.1 to 5.4.10 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to modify the password of an SSL VPN web portal user via specially crafted HTTP requests