CVE-2023-44256
MEDIUM 6.5EPSS 1.8%
A server-side request forgery vulnerability [CWE-918] in Fortinet FortiAnalyzer version 7.4.0, version 7.2.0 through 7.2.3 and before 7.0.8 and FortiManager version 7.4.0, version 7.2.0 through 7.2.3 and before 7.0.8 allows a remote attacker with low privileges to view sensitive data from internal servers or perform a local port scan via a crafted HTTP request.
- Affected
- Fortinet · FortiAnalyzer · FortiManager
- CVSS v3.1 NVD
- 6.5 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - CVSS v3.1 FORTINET
- 6.5 MEDIUM
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - EPSS
- 1.77% chance of exploitation in the next 30 days, 78th percentile
- Published
- 2023-10-20
- Updated
- 2024-09-12