| Package | Affected versions | Patched versions |
|---|---|---|
| fortiproxy | = 7.4.0≥ 1.2.0, < 7.0.15≥ 7.2.0, < 7.2.8 | 7.0.157.2.8 |
| fortiswitchmanager | ≥ 7.0.0, < 7.0.3≥ 7.2.0, < 7.2.3 | 7.0.37.2.3 |
A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet allows a privileged attacker to execute arbitrary code or commands via specially crafted requests.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free