A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests, where the `Host` header points to an arbitrary webserver
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
FortiTester
Vendor
Fortinet
Product
FortiTester
Platforms
Unknown
Default status
unaffected
FortiTester · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7.2.0
affected
semver
Unavailable
7.2.1
None listed
7.1.0
affected
semver
Unavailable
7.1.1
None listed
7.0.0
affected
Unavailable
Unavailable
Unavailable
None listed
4.2.0
affected
semver
Unavailable
4.2.1
None listed
4.1.0
affected
semver
Unavailable
4.1.1
None listed
4.0.0
affected
Unavailable
Unavailable
Unavailable
None listed
3.9.0
affected
semver
Unavailable
3.9.2
None listed
3.8.0
affected
Unavailable
Unavailable
Unavailable
None listed
3.7.0
affected
semver
Unavailable
3.7.1
None listed
3.6.0
affected
Unavailable
Unavailable
Unavailable
None listed
3.5.0
affected
semver
Unavailable
3.5.1
None listed
3.4.0
affected
Unavailable
Unavailable
Unavailable
None listed
3.3.0
affected
semver
Unavailable
3.3.1
None listed
FortiOS
Vendor
Fortinet
Product
FortiOS
Platforms
Unknown
Default status
unaffected
FortiOS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7.2.0
affected
Unavailable
Unavailable
Unavailable
None listed
7.0.0
affected
semver
Unavailable
7.0.5
None listed
6.4.0
affected
semver
Unavailable
6.4.16
None listed
6.2.0
affected
semver
Unavailable
6.2.17
None listed
6.0.0
affected
semver
Unavailable
6.0.18
None listed
6.4.0
affected
semver
6.4.*
Unavailable
None listed
FortiRecorder
Vendor
Fortinet
Product
FortiRecorder
Platforms
Unknown
Default status
unaffected
FortiRecorder · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
6.4.0
affected
semver
Unavailable
6.4.2
None listed
6.0.0
affected
semver
Unavailable
6.0.10
None listed
2.7.0
affected
semver
Unavailable
2.7.7
None listed
2.6.0
affected
semver
Unavailable
2.6.3
None listed
FortiNDR
Vendor
Fortinet
Product
FortiNDR
Platforms
Unknown
Default status
unaffected
FortiNDR · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7.2.0
affected
Unavailable
Unavailable
Unavailable
None listed
7.1.0
affected
Unavailable
Unavailable
Unavailable
None listed
7.0.0
affected
semver
Unavailable
7.0.7
None listed
1.5.0
affected
semver
Unavailable
1.5.3
None listed
1.4.0
affected
Unavailable
Unavailable
Unavailable
None listed
1.3.0
affected
semver
Unavailable
1.3.1
None listed
1.2.0
affected
Unavailable
Unavailable
Unavailable
None listed
1.1.0
affected
Unavailable
Unavailable
Unavailable
None listed
FortiADC
Vendor
Fortinet
Product
FortiADC
Platforms
Unknown
Default status
unaffected
FortiADC · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7.0.0
affected
semver
Unavailable
7.0.1
None listed
6.2.0
affected
semver
Unavailable
6.2.3
None listed
6.1.0
affected
semver
Unavailable
6.1.6
None listed
6.0.0
affected
semver
Unavailable
6.0.4
None listed
5.4.0
affected
semver
Unavailable
5.4.5
None listed
5.3.0
affected
semver
Unavailable
5.3.7
None listed
5.2.0
affected
semver
Unavailable
5.2.8
None listed
5.1.0
affected
semver
Unavailable
5.1.7
None listed
5.0.0
affected
semver
Unavailable
5.0.4
None listed
FortiManager
Vendor
Fortinet
Product
FortiManager
Platforms
Unknown
Default status
unaffected
FortiManager · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7.4.0
affected
semver
Unavailable
7.4.3
None listed
7.2.0
affected
semver
Unavailable
7.2.11
None listed
7.0.0
affected
semver
Unavailable
7.0.15
None listed
6.4.0
affected
semver
Unavailable
6.4.15
None listed
6.2.0
affected
semver
Unavailable
6.2.13
None listed
FortiVoice
Vendor
Fortinet
Product
FortiVoice
Platforms
Unknown
Default status
unaffected
FortiVoice · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7.0.0
affected
semver
Unavailable
7.0.1
None listed
6.4.0
affected
semver
Unavailable
6.4.8
None listed
6.0.0
affected
semver
Unavailable
6.0.11
None listed
FortiSOAR on-premise
Vendor
Fortinet
Product
FortiSOAR on-premise
Platforms
Unknown
Default status
unaffected
FortiSOAR on-premise · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7.2.0
affected
semver
Unavailable
7.2.2
None listed
7.0.0
affected
semver
Unavailable
7.0.3
None listed
6.4.3
affected
semver
Unavailable
6.4.4
None listed
6.4.0
affected
semver
Unavailable
6.4.1
None listed
FortiDDoS
Vendor
Fortinet
Product
FortiDDoS
Platforms
Unknown
Default status
unaffected
FortiDDoS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
5.5.0
affected
semver
Unavailable
5.5.1
None listed
5.4.0
affected
semver
Unavailable
5.4.3
None listed
5.3.0
affected
semver
Unavailable
5.3.2
None listed
5.2.0
affected
Unavailable
Unavailable
Unavailable
None listed
5.1.0
affected
Unavailable
Unavailable
Unavailable
None listed
5.0.0
affected
Unavailable
Unavailable
Unavailable
None listed
4.7.0
affected
Unavailable
Unavailable
Unavailable
None listed
4.6.0
affected
Unavailable
Unavailable
Unavailable
None listed
4.5.0
affected
Unavailable
Unavailable
Unavailable
None listed
FortiWLC
Vendor
Fortinet
Product
FortiWLC
Platforms
Unknown
Default status
unaffected
FortiWLC · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
8.6.0
affected
semver
Unavailable
8.6.7
None listed
8.5.0
affected
semver
Unavailable
8.5.5
None listed
8.4.4
affected
semver
Unavailable
8.4.8
None listed
8.4.0
affected
semver
Unavailable
8.4.2
None listed
FortiAnalyzer
Vendor
Fortinet
Product
FortiAnalyzer
Platforms
Unknown
Default status
unaffected
FortiAnalyzer · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7.4.0
affected
semver
Unavailable
7.4.2
None listed
7.2.0
affected
semver
Unavailable
7.2.11
None listed
7.0.0
affected
semver
Unavailable
7.0.15
None listed
6.4.0
affected
semver
Unavailable
6.4.15
None listed
6.2.0
affected
semver
Unavailable
6.2.13
None listed
FortiPortal
Vendor
Fortinet
Product
FortiPortal
Platforms
Unknown
Default status
unaffected
FortiPortal · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
6.0.0
affected
semver
Unavailable
6.0.9
None listed
FortiAuthenticator
Vendor
Fortinet
Product
FortiAuthenticator
Platforms
Unknown
Default status
unaffected
FortiAuthenticator · Scoped product and version facts