VYPR
← All advisories
Medium severity4.7NVD Advisory· Published Jan 22, 2025· Updated Jun 17, 2026

CVE-2022-23439

CVE-2022-23439

Description

A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests, where the Host header points to an arbitrary webserver

Affected products

32
  • Fortinet/Fortiadc 200d2 versions
    cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*range: >=5.4.0,<6.2.4
    • cpe:2.3:h:fortinet:fortiadc:7.0.1:*:*:*:*:*:*:*range: 7.0.0
  • Fortinet/Fortiauthenticator2 versions
    cpe:2.3:a:fortinet:fortiauthenticator:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:fortiauthenticator:*:*:*:*:*:*:*:*range: >=6.3.0,<6.3.4
    • cpe:2.3:a:fortinet:fortiauthenticator:6.4.1:*:*:*:*:*:*:*range: 6.4.0
  • Fortinet/Fortiddos F3 versions
    cpe:2.3:a:fortinet:fortiddos-f:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fortinet:fortiddos-f:*:*:*:*:*:*:*:*range: >=6.1.0,<6.3.4
    • cpe:2.3:o:fortinet:fortiddos-f:6.3.3:*:*:*:*:*:*:*range: 6.3.0
    • cpe:2.3:o:fortinet:fortiddos:5.5.1:*:*:*:*:*:*:*range: 5.5.0
  • Fortinet/Fortiddos
    cpe:2.3:a:fortinet:fortiddos:*:*:*:*:*:*:*:*
    Range: >=5.3.0,<5.5.2
  • Fortinet/Fortimail2 versions
    cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*range: >=6.4.0,<7.0.4
    • cpe:2.3:a:fortinet:fortimail:7.0.3:*:*:*:*:*:*:*range: 7.0.0
  • Fortinet/Fortindr2 versions
    cpe:2.3:a:fortinet:fortindr:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:fortindr:*:*:*:*:*:*:*:*range: >=1.4.0,<7.1.1
    • cpe:2.3:a:fortinet:fortindr:7.2.0:*:*:*:*:*:*:*
  • Fortinet/Fortiportalcpe-rescue
    cpe:2.3:a:fortinet:fortiportal:6.0.9:*:*:*:*:*:*:*
    Range: 6.0.0
  • Fortinet/Fortiproxy2 versions
    cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*range: >=2.0.0,<7.0.5
    • cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*range: 7.0.0
  • Fortinet/FortiRecorder2 versions
    cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:*range: >=6.0.0,<6.0.11
    • cpe:2.3:a:fortinet:fortirecorder:6.4.2:*:*:*:*:*:*:*range: 6.4.0
  • Fortinet/Fortisoar
    cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*
    Range: >=6.4.0,<7.3.0
  • Fortinet/FortiSOAR on-premisecpe-rescue
    cpe:2.3:a:fortinet:fortisoaron-premise:7.2.2:*:*:*:*:*:*:*
    Range: 7.2.0
  • Fortinet/FortiSwitch GUIcpe-rescue2 versions
    cpe:2.3:a:fortinet:fortiswitch:7.0.4:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:fortiswitch:7.0.4:*:*:*:*:*:*:*range: 7.0.0
    • cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*range: >=6.4.0,<7.0.5
  • Fortinet/FortiTester2 versions
    cpe:2.3:a:fortinet:fortitester:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:fortitester:*:*:*:*:*:*:*:*range: >=3.7.0,<7.2.2
    • cpe:2.3:a:fortinet:fortitester:7.2.1:*:*:*:*:*:*:*range: 7.2.0
  • Fortinet/Fortivoice2 versions
    cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*range: >=6.0.0,<6.4.9
    • cpe:2.3:a:fortinet:fortivoice:7.0.1:*:*:*:*:*:*:*range: 7.0.0
  • Fortinet/Fortiwlc2 versions
    cpe:2.3:a:fortinet:fortiwlc:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:fortiwlc:*:*:*:*:*:*:*:*range: >=8.6.0,<8.6.7
    • cpe:2.3:a:fortinet:fortiwlc:8.6.7:*:*:*:*:*:*:*range: 8.6.0
  • Fortinet/Fortianalyzerv5
    cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*
    Range: 7.4.0
  • Fortinet/Fortimanagerv5
    cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*
    Range: 7.4.0
  • Fortinet/Fortios2 versions
    cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*range: >=6.0.0,<7.0.6
    • cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*range: 7.2.0
  • Fortinet/Fortinetllm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.