Skip to content
Fencer Vulns
medium 4.7

CVE-2022-23439 json

A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafte…

published 2025-01-22 21 mo ago modified 2026-06-17 4 mo ago also EUVD-2022-28514

cvss
4.7
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.5%
EPSS 0.5% chance of exploitation in 30 days, percentile 40%
public exploits
0
none known

Summary

A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests, where the `Host` header points to an arbitrary webserver

Patch / fix

  • fortinet fortiadc 6.2.4
  • fortinet fortiauthenticator 6.3.4, 6.4.2
  • fortinet fortiddos 5.5.2
  • fortinet fortiddos-f 6.3.4
  • fortinet fortimail 7.0.4
  • fortinet fortindr 7.1.1
  • fortinet fortiproxy 7.0.5, 7.4.0
  • fortinet fortirecorder 6.0.11, 6.4.3
  • fortinet fortisoar 7.3.0
  • fortinet fortitester 7.2.2
  • fortinet fortivoice 6.4.9
  • fortinet fortiwlc 8.6.7
  • fortinet fortios 7.0.6, 7.2.5
  • fortinet fortiswitch 7.0.5

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-24-074-05 updated cvss 4.7

Siemens RUGGEDCOM APE1808

  • Siemens RUGGEDCOM APE1808
    affected: fixed in V7.4.3

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
21 mo ago

Exploit prediction

0.46% chance of exploitation in the next 30 days, higher than 40% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 4.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C
CNA 3.1 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
NVD 3.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected products

  • Fortinet FortiTester
  • Fortinet FortiOS
  • Fortinet FortiRecorder
  • Fortinet FortiNDR
  • Fortinet FortiADC
  • Fortinet FortiManager
  • Fortinet FortiVoice
  • Fortinet FortiSOAR on-premise
  • Fortinet FortiDDoS
  • Fortinet FortiWLC
  • Fortinet FortiAnalyzer
  • Fortinet FortiPortal
  • Fortinet FortiAuthenticator
  • Fortinet FortiMail
  • Fortinet FortiDDoS-F
  • Fortinet FortiSwitch
  • Fortinet FortiProxy

Classification

Weakness
  • CWE-610 Externally Controlled Reference to a Resource in Another Sphere
Technology feeds

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.