VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Nov 14, 2023· Updated Jun 17, 2026

CVE-2023-25603

CVE-2023-25603

Description

A permissive cross-domain policy with untrusted domains vulnerability in Fortinet FortiADC 7.1.0 - 7.1.1, FortiDDoS-F 6.3.0 - 6.3.4 and 6.4.0 - 6.4.1 allow an unauthorized attacker to carry out privileged actions and retrieve sensitive information via crafted web requests.

Affected products

9
  • Fortinet/Fortiadc 200d3 versions
    cpe:2.3:a:fortinet:fortiadc:7.1.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fortinet:fortiadc:7.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiadc:7.1.1:*:*:*:*:*:*:*
    • (no CPE)range: 7.1.0
  • Fortinet/Fortiddos F5 versions
    cpe:2.3:a:fortinet:fortiddos-f:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:fortinet:fortiddos-f:*:*:*:*:*:*:*:*range: >=6.3.0,<=6.3.4
    • cpe:2.3:a:fortinet:fortiddos-f:6.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiddos-f:6.4.1:*:*:*:*:*:*:*
    • (no CPE)range: 6.3.0 - 6.3.4, 6.4.0 - 6.4.1
    • (no CPE)range: 6.4.0
  • Fortinet/FortiADC-Ellm-fuzzy
    Range: 7.1.0 - 7.1.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.