Patch days / July 2023

Fortinet PSIRT Monthly Advisories — July 2023

Tuesday, 11 July 2023

Vulnerabilities: 5
Critical: 0
High: 2
Zero-days: 0
Public exploit: 0

Exploited 0

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

None of this release's vulnerabilities is known to be exploited so far.

All vulnerabilities 5

High2 Show

High 7.3
CVE-2022-23447 An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in FortiExtender management interface 7.0.0 through 7.…
High 7.2
CVE-2023-23777 An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in FortiWeb version 7.0.1 and below, 6.4 a…
EPSS 1.3%

Medium3 Show