Lucene search
FortiGuard LabsFG-IR-20-229HistoryFeb 03, 2021 - 12:00 a.m.
FortiProxy SSL VPN buffer overflow when parsing javascript href content
2021-02-0300:00:00
FortiGuard Labs
www.fortiguard.com
24
fortiproxy
ssl vpn
buffer overflow
web portal
heap
vulnerability
web service
remote code execution
javascript
EPSS
0.008
Percentile
81.9%
A heap buffer overflow vulnerability in the FortiProxy SSL VPN web portal may cause the SSL VPN web service termination for logged in users or potential remote code execution on FortiProxy. This happens when an authenticated user visits a specifically crafted proxied webpage and is due to a failure to handle Javascript HREF content properly.
Related
cisa_kev
cisa_kev
Fortinet FortiOS and FortiProxy Out-of-bounds Write
2022-01-10 00:00:00
nvd
nvd
CVE-2018-13383
2019-05-29 18:29:00
nessus
nessus
cvelist
cvelist
CVE-2018-13383
2019-05-29 17:20:03
cve
cve
CVE-2018-13383
2019-05-29 18:29:00
attackerkb
attackerkb
CVE-2018-13383
2019-05-29 00:00:00
fortinet
fortinet
Protect
2019-11-26 00:00:00
prion
prion
Heap overflow
2019-05-29 18:29:00
threatpost
threatpost
APT Groups Exploiting Flaws in Unpatched VPNs, Officials Warn
2019-10-08 12:44:16
cisa
cisa
CISA Adds 15 Known Exploited Vulnerabilities to Catalog
2022-01-10 00:00:00