Vulnerabilities > Fortinet > Fortiproxy > 7.2.3

DATE CVE VULNERABILITY TITLE RISK
2023-06-16 CVE-2023-33306 NULL Pointer Dereference vulnerability in Fortinet Fortios and Fortiproxy
A null pointer dereference in Fortinet FortiOS before 7.2.5, before 7.0.11 and before 6.4.13, FortiProxy before 7.2.4 and before 7.0.10 allows attacker to denial of sslvpn service via specifically crafted request in bookmark parameter.
network
low complexity
fortinet CWE-476
6.5
6.5
2023-06-13 CVE-2023-29178 Access of Uninitialized Pointer vulnerability in Fortinet Fortios and Fortiproxy
A access of uninitialized pointer vulnerability [CWE-824] in Fortinet FortiProxy version 7.2.0 through 7.2.3 and before 7.0.9 and FortiOS version 7.2.0 through 7.2.4 and before 7.0.11 allows an authenticated attacker to repetitively crash the httpsd process via crafted HTTP or HTTPS requests.
network
low complexity
fortinet CWE-824
4.3
4.3