← CVE Radar
CVE-2018-13383Fortinet FortiOS and FortiProxy Out-of-bounds Write
A heap buffer overflow in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.10, 5.4.0 through 5.4.12, 5.2.14 and earlier and FortiProxy 2.0.0, 1.2.8 and earlier in the SSL VPN web portal may cause the SSL VPN web service termination for logged in users due to a failure to properly handle javascript href data when proxying webpages.
6.5 MEDIUMEPSS 32.47%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 6.5 | MEDIUM | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
| 4.3 | MEDIUM | 3.1fortinet (CNA) | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L |
| 4.3 | MEDIUM | 2.0NVD | AV:N/AC:M/Au:N/C:N/I:N/A:P |
CISA required action
⚡ Known exploited · remediation due Jul 10, 2022
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2018-13383
- Status
- Analyzed
- Assigner (CNA)
- fortinet
- Published
- May 29, 2019
- Last modified
- 2026-06-17 01:39 UTC
- Weaknesses
Affected Products
As published by the CNA in the CVE record.
FortinetFortinet FortiOS and FortiProxy1 version range
- FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.10, 5.4.0 through 5.4.12, 5.2.14 and earlier, FortiProxy 2.0.0, 1.2.8 and earlier