Heist/ feed

Security feed

advisoryKnown exploited CVECISA Known Exploited Vulnerabilities

Fortinet FortiOS and FortiProxy Out-of-bounds Write

A heap buffer overflow in Fortinet FortiOS and FortiProxy may cause the SSL VPN web service termination for logged in users. CISA required action: Apply updates per vendor instructions.

Announced

FortiOS and FortiProxyCVE-2018-13383
Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2018-13383

FortiOS and FortiProxy

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2018-13383

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#2939 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement
advisoryKnown exploited CVECISA Known Exploited Vulnerabilities

Fortinet FortiOS and FortiProxy Improper Authorization

An Improper Authorization vulnerability in Fortinet FortiOS and FortiProxy under SSL VPN web portal allows an unauthenticated attacker to modify the password. CISA required action: Apply updates per vendor instructions.

Announced

FortiOS and FortiProxyCVE-2018-13382
Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2018-13382

FortiOS and FortiProxy

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2018-13382

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#2937 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement
advisoryKnown exploited CVECISA Known Exploited Vulnerabilities

Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that may allow an unauthenticated, remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Announced

FortiOS and FortiProxyCVE-2024-55591
Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2024-55591

FortiOS and FortiProxy

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2024-55591

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#1010 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement
advisoryKnown exploited CVECISA Known Exploited Vulnerabilities

Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that allows a remote attacker to gain super-admin privileges via crafted CSF proxy requests. CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Announced

FortiOS and FortiProxyCVE-2025-24472
Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2025-24472

FortiOS and FortiProxy

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2025-24472

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#454 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement