The vulnerability in the web interface of the FortiOS operating system and the FortiProxy proxy server, which allows a hacker to gain unauthorized access to protected information.

🗓️ 13 Mar 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

Web interface flaw in FortiOS and FortiProxy allows unauthorized access via hyperlink processing errors.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2022-23439	22 Jan 202510:02	–	circl
CNNVD	Fortinet多款产品安全漏洞	22 Jan 202500:00	–	cnnvd
CVE	CVE-2022-23439	22 Jan 202509:10	–	cve
Cvelist	CVE-2022-23439	22 Jan 202509:10	–	cvelist
EUVD	EUVD-2022-28514	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Fortinet FortiSwitch, FortiManager, FortiAnalyzer, FortiOS and FortiProxy	15 Jan 202513:25	–	ncsc
NVD	CVE-2022-23439	22 Jan 202510:15	–	nvd
OSV	CVE-2022-23439	22 Jan 202510:15	–	osv
Positive Technologies	PT-2025-1361 · Fortinet · Fortiswitch +16	14 Jan 202500:00	–	ptsecurity
RedhatCVE	CVE-2022-23439	9 Jan 202609:15	–	redhatcve

Vulners

Node

fortinet fortiproxyRange7.0.0–7.0.4

OR

fortinet fortiadcRange6.2.0–6.2.4

OR

fortinet fortiswitchRange6.4.0–6.4.10

OR

fortinet fortiswitchRange7.0.0–7.0.4

OR

fortinet fortiddos-fRange6.3.0–6.3.3

OR

fortinet fortiproxyMatch2.0

OR

fortinet fortimailRange7.0.0–7.0.3

OR

fortinet fortindr_(network_detection_and_response)Match7.1.0

OR

fortinet fortindr_(network_detection_and_response)Match1.5

OR

fortinet fortindr_(network_detection_and_response)Match1.4

OR

fortinet fortirecorderRange6.4.0–6.4.2

OR

fortinet fortiproxyMatch7.2

OR

fortinet fortiproxyMatch7.0

OR

fortinet fortimailMatch6.4

OR

fortinet fortivoice_enterpriseRange6.4.0–6.4.4

OR

fortinet fortivoice_enterpriseRange6.0.0–6.0.10

OR

fortinet fortindr_(network_detection_and_response)Match7.2.0

OR

fortinet fortindr_(network_detection_and_response)Match7.0

OR

fortinet fortiwlcRange8.6.0–8.6.6

OR

fortinet fortiadcMatch6.1

OR

fortinet fortiadcMatch6.0

OR

fortinet fortiadcMatch5.4

OR

fortinet fortiauthenticatorRange6.4.0–6.4.1

OR

fortinet fortiauthenticatorRange6.3.0–6.3.3

OR

fortinet fortiauthenticatorMatch6.2

OR

fortinet fortiauthenticatorMatch6.1

OR

fortinet fortirecorderRange6.0.0–6.0.10

OR

fortinet fortiddos-fMatch6.2

OR

fortinet fortiddos-fMatch6.1

OR

fortinet fortiddos-fRange5.5.0–5.5.1

OR

fortinet fortiddos-fMatch5.4

OR

fortinet fortiddos-fMatch5.3

OR

fortinet fortisoarMatch7.2

OR

fortinet fortisoarMatch7.0

OR

fortinet fortisoarMatch6.4

OR

fortinet fortitesterRange7.2.0–7.2.1

OR

fortinet fortitesterMatch7.1

OR

fortinet fortitesterMatch7.0

OR

fortinet fortitesterMatch4.2

OR

fortinet fortitesterMatch4.1

OR

fortinet fortitesterMatch4.0

OR

fortinet fortitesterMatch3.9

OR

fortinet fortitesterMatch3.8

OR

fortinet fortitesterMatch3.7

OR

fortinet fortiosRange7.0.0–7.0.5

OR

fortinet fortiosMatch7.2.0

OR

fortinet fortiosRange7.2.0–7.2.4

OR

fortinet fortiosRange7.0.0–7.0.11

OR

fortinet fortiosRange6.4.0–6.4.12

OR

fortinet fortiosMatch6.0

OR

fortinet fortiosMatch6.2

OR

fortinet fortiosMatch7.0

OR

fortinet fortiosMatch6.4

Source	Link
fortiguard	www.fortiguard.com/psirt/FG-IR-23-494
web	www.web.nvd.nist.gov/view/vuln/detail
fortiguard	www.fortiguard.com/psirt/FG-IR-23-494

13 Mar 2025 00:00Current

5.5Medium risk

Vulners AI Score5.5

CVSS 24

CVSS 34.7

EPSS0.00441

FortiOS FortiProxy web interface hyperlink processing errors