CVE-2022-23439 MEDIUM

CVE-2022-23439

Vendor Fortinet

Product FortiTester

Weakness CWE-610

Published January 22, 2025

Last update January 14, 2026

View on NVD All CVEs

CVSS base score

4.1/10

Attack vector Network

Attack complexity High

Privileges required None

User interaction Required

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C

What the vulnerability does

01Description

A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests, where the `Host` header points to an arbitrary webserver

Key dates

02Disclosure timeline

January 22, 2025 CVE published

January 14, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-23439 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/610.html

Related vulnerabilities

Identifiers

CVE CVE-2022-23439

CWE CWE-610

CVSS 4.1 / MEDIUM

Affected versions

Vendor Fortinet

Product FortiTester

Affected ≥ 7.2.0 and ≤ 7.2.1

Vendor Fortinet

Product FortiTester

Affected ≥ 7.1.0 and ≤ 7.1.1

Vendor Fortinet

Product FortiTester

Affected 7.0.0

Vendor Fortinet

Product FortiTester

Affected ≥ 4.2.0 and ≤ 4.2.1

Vendor Fortinet

Product FortiTester

Affected ≥ 4.1.0 and ≤ 4.1.1

Vendor Fortinet

Product FortiTester

Affected 4.0.0

Vendor Fortinet

Product FortiTester

Affected ≥ 3.9.0 and ≤ 3.9.2

Vendor Fortinet

Product FortiTester

Affected 3.8.0

Vendor Fortinet

Product FortiTester

Affected ≥ 3.7.0 and ≤ 3.7.1

Vendor Fortinet

Product FortiTester

Affected 3.6.0

Vendor Fortinet

Product FortiTester

Affected ≥ 3.5.0 and ≤ 3.5.1

Vendor Fortinet

Product FortiTester

Affected 3.4.0

Vendor Fortinet

Product FortiTester

Affected ≥ 3.3.0 and ≤ 3.3.1

Vendor Fortinet

Product FortiOS

Affected 7.2.0

Vendor Fortinet

Product FortiOS

Affected ≥ 7.0.0 and ≤ 7.0.5

Vendor Fortinet

Product FortiOS

Affected ≥ 6.4.0 and ≤ 6.4.16

Vendor Fortinet

Product FortiOS

Affected ≥ 6.2.0 and ≤ 6.2.17

Vendor Fortinet

Product FortiOS

Affected ≥ 6.0.0 and ≤ 6.0.18

Vendor Fortinet

Product FortiOS

Affected ≥ 6.4.0 and < 6.4.*

Vendor Fortinet

Product FortiRecorder

Affected ≥ 6.4.0 and ≤ 6.4.2

Vendor Fortinet

Product FortiRecorder

Affected ≥ 6.0.0 and ≤ 6.0.10

Vendor Fortinet

Product FortiRecorder

Affected ≥ 2.7.0 and ≤ 2.7.7

Vendor Fortinet

Product FortiRecorder

Affected ≥ 2.6.0 and ≤ 2.6.3

Vendor Fortinet

Product FortiNDR

Affected 7.2.0

Vendor Fortinet

Product FortiNDR

Affected 7.1.0

Vendor Fortinet

Product FortiNDR

Affected ≥ 7.0.0 and ≤ 7.0.7

Vendor Fortinet

Product FortiNDR

Affected ≥ 1.5.0 and ≤ 1.5.3

Vendor Fortinet

Product FortiNDR

Affected 1.4.0

Vendor Fortinet

Product FortiNDR

Affected ≥ 1.3.0 and ≤ 1.3.1

Vendor Fortinet

Product FortiNDR

Affected 1.2.0

Vendor Fortinet

Product FortiNDR

Affected 1.1.0

Vendor Fortinet

Product FortiADC

Affected ≥ 7.0.0 and ≤ 7.0.1

Vendor Fortinet

Product FortiADC

Affected ≥ 6.2.0 and ≤ 6.2.3

Vendor Fortinet

Product FortiADC

Affected ≥ 6.1.0 and ≤ 6.1.6

Vendor Fortinet

Product FortiADC

Affected ≥ 6.0.0 and ≤ 6.0.4

Vendor Fortinet

Product FortiADC

Affected ≥ 5.4.0 and ≤ 5.4.5

Vendor Fortinet

Product FortiADC

Affected ≥ 5.3.0 and ≤ 5.3.7

Vendor Fortinet

Product FortiADC

Affected ≥ 5.2.0 and ≤ 5.2.8

Vendor Fortinet

Product FortiADC

Affected ≥ 5.1.0 and ≤ 5.1.7

Vendor Fortinet

Product FortiADC

Affected ≥ 5.0.0 and ≤ 5.0.4

Vendor Fortinet

Product FortiManager

Affected ≥ 7.4.0 and ≤ 7.4.3

Vendor Fortinet

Product FortiManager

Affected ≥ 7.2.0 and ≤ 7.2.11

Vendor Fortinet

Product FortiManager

Affected ≥ 7.0.0 and ≤ 7.0.15

Vendor Fortinet

Product FortiManager

Affected ≥ 6.4.0 and ≤ 6.4.15

Vendor Fortinet

Product FortiManager

Affected ≥ 6.2.0 and ≤ 6.2.13

Vendor Fortinet

Product FortiVoice

Affected ≥ 7.0.0 and ≤ 7.0.1

Vendor Fortinet

Product FortiVoice

Affected ≥ 6.4.0 and ≤ 6.4.8

Vendor Fortinet

Product FortiVoice

Affected ≥ 6.0.0 and ≤ 6.0.11

Vendor Fortinet

Product FortiSOAR on-premise

Affected ≥ 7.2.0 and ≤ 7.2.2

Vendor Fortinet

Product FortiSOAR on-premise

Affected ≥ 7.0.0 and ≤ 7.0.3

Vendor Fortinet

Product FortiSOAR on-premise

Affected ≥ 6.4.3 and ≤ 6.4.4

Vendor Fortinet

Product FortiSOAR on-premise

Affected ≥ 6.4.0 and ≤ 6.4.1

Vendor Fortinet

Product FortiDDoS

Affected ≥ 5.5.0 and ≤ 5.5.1

Vendor Fortinet

Product FortiDDoS

Affected ≥ 5.4.0 and ≤ 5.4.3

Vendor Fortinet

Product FortiDDoS

Affected ≥ 5.3.0 and ≤ 5.3.2

Vendor Fortinet

Product FortiDDoS

Affected 5.2.0

Vendor Fortinet

Product FortiDDoS

Affected 5.1.0

Vendor Fortinet

Product FortiDDoS

Affected 5.0.0

Vendor Fortinet

Product FortiDDoS

Affected 4.7.0

Vendor Fortinet

Product FortiDDoS

Affected 4.6.0

Vendor Fortinet

Product FortiDDoS

Affected 4.5.0

Vendor Fortinet

Product FortiWLC

Affected ≥ 8.6.0 and ≤ 8.6.7

Vendor Fortinet

Product FortiWLC

Affected ≥ 8.5.0 and ≤ 8.5.5

Vendor Fortinet

Product FortiWLC

Affected ≥ 8.4.4 and ≤ 8.4.8

Vendor Fortinet

Product FortiWLC

Affected ≥ 8.4.0 and ≤ 8.4.2

Vendor Fortinet

Product FortiAnalyzer

Affected ≥ 7.4.0 and ≤ 7.4.2

Vendor Fortinet

Product FortiAnalyzer

Affected ≥ 7.2.0 and ≤ 7.2.11

Vendor Fortinet

Product FortiAnalyzer

Affected ≥ 7.0.0 and ≤ 7.0.15

Vendor Fortinet

Product FortiAnalyzer

Affected ≥ 6.4.0 and ≤ 6.4.15

Vendor Fortinet

Product FortiAnalyzer

Affected ≥ 6.2.0 and ≤ 6.2.13

Vendor Fortinet

Product FortiPortal

Affected ≥ 6.0.0 and ≤ 6.0.9

Vendor Fortinet

Product FortiAuthenticator

Affected ≥ 6.4.0 and ≤ 6.4.1

Vendor Fortinet

Product FortiAuthenticator

Affected ≥ 6.3.0 and ≤ 6.3.3

Vendor Fortinet

Product FortiAuthenticator

Affected ≥ 6.2.0 and ≤ 6.2.2

Vendor Fortinet

Product FortiAuthenticator

Affected ≥ 6.1.0 and ≤ 6.1.3

Vendor Fortinet

Product FortiAuthenticator

Affected ≥ 6.0.0 and ≤ 6.0.8

Vendor Fortinet

Product FortiAuthenticator

Affected 5.5.0

Vendor Fortinet

Product FortiAuthenticator

Affected ≥ 5.4.0 and ≤ 5.4.1

Vendor Fortinet

Product FortiAuthenticator

Affected ≥ 5.3.0 and ≤ 5.3.1

Vendor Fortinet

Product FortiAuthenticator

Affected ≥ 5.2.0 and ≤ 5.2.2

Vendor Fortinet

Product FortiAuthenticator

Affected ≥ 5.1.0 and ≤ 5.1.2

Vendor Fortinet

Product FortiMail

Affected ≥ 7.0.0 and ≤ 7.0.3

Vendor Fortinet

Product FortiMail

Affected ≥ 6.4.0 and ≤ 6.4.8

Vendor Fortinet

Product FortiMail

Affected ≥ 6.2.0 and ≤ 6.2.9

Vendor Fortinet

Product FortiMail

Affected ≥ 6.0.0 and ≤ 6.0.12

Vendor Fortinet

Product FortiMail

Affected ≥ 5.4.0 and ≤ 5.4.12

Vendor Fortinet

Product FortiDDoS-F

Affected ≥ 6.3.0 and ≤ 6.3.3

Vendor Fortinet

Product FortiDDoS-F

Affected ≥ 6.2.0 and ≤ 6.2.3

Vendor Fortinet

Product FortiDDoS-F

Affected ≥ 6.1.0 and ≤ 6.1.5

Vendor Fortinet

Product FortiSwitch

Affected ≥ 7.0.0 and ≤ 7.0.4

Vendor Fortinet

Product FortiSwitch

Affected ≥ 6.4.0 and ≤ 6.4.10

Vendor Fortinet

Product FortiSwitch

Affected ≥ 6.2.0 and ≤ 6.2.8

Vendor Fortinet

Product FortiSwitch

Affected ≥ 6.0.0 and ≤ 6.0.7

Vendor Fortinet

Product FortiProxy

Affected ≥ 7.0.0 and ≤ 7.0.4

Vendor Fortinet

Product FortiProxy

Affected ≥ 2.0.0 and ≤ 2.0.14

Vendor Fortinet

Product FortiProxy

Affected ≥ 1.2.0 and ≤ 1.2.13

Vendor Fortinet

Product FortiProxy

Affected ≥ 1.1.0 and ≤ 1.1.6

Vendor Fortinet

Product FortiProxy

Affected ≥ 1.0.0 and ≤ 1.0.7

CVE-2022-23439

01Description

02Disclosure timeline

03References

04Related CVE