EUVD-2018-5328

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Host Header Redirection vulnerability in Fortinet FortiOS under SSL VPN can redirect users to arbitrary sites.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2018-13384	5 Jun 201900:26	–	circl
CVE	CVE-2018-13384	4 Jun 201920:38	–	cve
Cvelist	CVE-2018-13384	4 Jun 201920:38	–	cvelist
Fortinet	Protect	3 Jan 202000:00	–	fortinet
Tenable Nessus	Fortinet FortiOS < 5.2.15, 5.4.0 < 6.0.5 SSL VPN web portal Host Header Redirection (FG-IR-19-002)	14 Jun 201900:00	–	nessus
Tenable Nessus	Fortinet FortiOS (Mac OS X) < 5.2.15, 5.4.0 < 6.0.5 SSL VPN Web Portal Host Header Redirection (FG-IR-19-002) (deprecated)	14 Jun 201900:00	–	nessus
NVD	CVE-2018-13384	4 Jun 201921:29	–	nvd
Prion	Design/Logic Flaw	4 Jun 201921:29	–	prion
Vulnrichment	CVE-2018-13384	4 Jun 201920:38	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "a84e59d5-6073-318b-8dfd-8a467590e413",
        "vendor": {
          "name": "Fortinet"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "e5112b15-4c61-3054-ac4e-bf07f90bd924",
        "product": {
          "name": "Fortinet FortiOS"
        },
        "product_version": "FortiOS all versions below 6.0.5"
      }
    ]
  }
]

Source	Link
fortiguard	www.fortiguard.com/advisory/FG-IR-19-002
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.2Medium risk

Vulners AI Score6.2

CVSS 36.1

CVSS 25.8

EPSS0.00282

SSVC