CVE Watch—

CVE-2018-13382

Fortinet FortiOS and FortiProxy Improper Authorization

CVSS

—

Sem CVSS

EPSS

81.7%

p100

KEV

SIM

10 de jan. de 2022

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

81.7%EPSS · 30 dias81.7%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Fortinet / FortiOS and FortiProxy

Vulnerabilidade

Fortinet FortiOS and FortiProxy Improper Authorization

Adicionado ao KEV

10 de jan. de 2022

Corrigir até

10 de jul. de 2022

Uso conhecido em ransomware

Sim

Descrição resumida

An Improper Authorization vulnerability in Fortinet FortiOS and FortiProxy under SSL VPN web portal allows an unauthenticated attacker to modify the password.

Ação necessária

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2018-13382

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2025-244728.1 ALT

94.4%

KEV—78Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability93d CVE-2024-555919.8 CRÍ

99.9%

KEV—80Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability93d CVE-2018-13383—

98.3%

KEV—80Fortinet FortiOS and FortiProxy Out-of-bounds Write—