VULNERABILITY INTELLIGENCE

CVE-2018-13383

CVSS score4.3 MEDIUM
EPSS probability33.65%
CISA KEVKnown exploited vulnerability
Published2019-05-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Known Exploited Vulnerability

Fortinet FortiOS and FortiProxy Out-of-bounds Write

Vendor / product: Fortinet / FortiOS and FortiProxy

Description

A heap buffer overflow in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.10, 5.4.0 through 5.4.12, 5.2.14 and earlier and FortiProxy 2.0.0, 1.2.8 and earlier in the SSL VPN web portal may cause the SSL VPN web service termination for logged in users due to a failure to properly handle javascript href data when proxying webpages.

Weakness classification

  • CWE-787: Out-of-bounds Write

Primary references