An out-of-bounds read vulnerability [CWE-125] in FortiOS SSLVPN web portal versions 7.4.0 through 7.4.4, versions 7.2.0 through 7.2.8, 7.0 all verisons, and 6.4 all versions may allow an authenticated attacker to perform a denial of service on the SSLVPN web portal via a specially crafted URL.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://fortiguard.fortinet.com/psirt/FG-IR-23-473 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
22 Jul 2025, 21:26
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Fortinet
Fortinet fortios |
|
| References | () https://fortiguard.fortinet.com/psirt/FG-IR-23-473 - Vendor Advisory | |
| CPE | cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* |
14 Jan 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-01-14 14:15
Updated : 2025-07-22 21:26
NVD link : CVE-2024-36504
Mitre link : CVE-2024-36504
JSON object : View
Products Affected
fortinet
- fortios
CWE
CWE-125
Out-of-bounds Read