A null pointer dereference vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4, FortiOS 7.0.0 through 7.0.11, FortiOS 6.4.0 through 6.4.12, FortiOS 6.2.0 through 6.2.14, FortiOS 6.0.0 through 6.0.16, FortiProxy 7.2.0 through 7.2.3, FortiProxy 7.0.0 through 7.0.10, FortiProxy 2.0.0 through 2.0.12, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions allows attacker to denial of service via specially crafted HTTP requests.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Fortinet Fortiproxy | — | Upgrade FortiProxy to 7.2.4Upgrade to the latest version of FortiProxyUpgrade FortiProxy to 2.0.13Upgrade FortiProxy to 7.0.11 | Sep 30, 2026 | Jun 12, 2023 |
| Fortios | — | Upgrade FortiOS to 6.0.17Upgrade FortiOS to 6.4.13Upgrade FortiOS to 6.2.15Upgrade FortiOS to 7.2.5Upgrade FortiOS to 7.0.12 | Dec 12, 2024 | Jun 12, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub