High severity7.2NVD Advisory· Published Jan 10, 2024· Updated Jun 17, 2026
CVE-2023-46712
CVE-2023-46712
Description
A improper access control in Fortinet FortiPortal version 7.0.0 through 7.0.6, Fortinet FortiPortal version 7.2.0 through 7.2.1 allows attacker to escalate its privilege via specifically crafted HTTP requests.
Affected products
3cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*range: >=7.0.0,<=7.0.6
- (no CPE)range: 7.0.0 - 7.0.6, 7.2.0 - 7.2.1
- (no CPE)range: 7.2.0
Patches
Vulnerability mechanics
References
1- fortiguard.com/psirt/FG-IR-23-395nvdVendor Advisory
News mentions
0No linked articles in our index yet.