Lucene search
FortiGuard LabsFG-IR-18-388HistoryNov 26, 2019 - 12:00 a.m.
Protect
2019-11-2600:00:00
FortiGuard Labs
www.fortiguard.com
28
EPSS
0.008
Percentile
81.9%
A heap buffer overflow vulnerability in the FortiOS SSL VPN web portal may cause the SSL VPN web service termination for logged in users or potential remote code execution on FortiOS; this happens when an authenticated user visits a specifically crafted proxy-ed webpage, and this is due to a failure to handle javascript href content properly. This only affects SSL VPN web-mode (SSL VPN tunnel-mode is not impacted)
Related
cisa_kev
cisa_kev
Fortinet FortiOS and FortiProxy Out-of-bounds Write
2022-01-10 00:00:00
nvd
nvd
CVE-2018-13383
2019-05-29 18:29:00
nessus
nessus
cvelist
cvelist
CVE-2018-13383
2019-05-29 17:20:03
cve
cve
CVE-2018-13383
2019-05-29 18:29:00
attackerkb
attackerkb
CVE-2018-13383
2019-05-29 00:00:00
fortinet
fortinet
FortiProxy SSL VPN buffer overflow when parsing javascript href content
2021-02-03 00:00:00
prion
prion
Heap overflow
2019-05-29 18:29:00
threatpost
threatpost
APT Groups Exploiting Flaws in Unpatched VPNs, Officials Warn
2019-10-08 12:44:16
cisa
cisa
CISA Adds 15 Known Exploited Vulnerabilities to Catalog
2022-01-10 00:00:00