CVE-2024-26015CWE-1389
An incorrect parsing of numbers with different radices vulnerability [CWE-1389] in FortiProxy version 7.4.3 and below, version 7.2.10 and below, version 7.0.17…
Low · published July 9, 2024
What it is
An incorrect parsing of numbers with different radices vulnerability [CWE-1389] in FortiProxy version 7.4.3 and below, version 7.2.10 and below, version 7.0.17 and below and FortiOS version 7.4.3 and below, version 7.2.8 and below, version 7.0.15 and below IP address validation feature may permit an unauthenticated attacker to bypass the IP blocklist via crafted requests.
The record
Technical detail
- CVSS v3.1
- 3.1 · LOW
- Vector
- CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N/E:F/RL:W/RC:R
- CVSS v4.0
- Not supplied
- EPSS
- 0.00467 · 39.4th percentile
- Weakness
- CWE-1389 · Incorrect Parsing of Numbers with Different Radices
- Published
- 2024-07-09T15:33Z
EPSS history
Timeline