Vulnerability Database

319,590

Total vulnerabilities in the database

CVE-2023-37930

Multiple issues including the use of uninitialized ressources [CWE-908] and excessive iteration [CWE-834] vulnerabilities vulnerability in Fortinet allows a VPN user to corrupt memory potentially leading to code or commands execution via specifically crafted requests.

  • Published: Apr 8, 2025
  • Updated: Jan 15, 2026
  • CVE: CVE-2023-37930
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWEs:

Software From Fixed in
fortinet / fortios 7.4.0 7.4.0.x
fortinet / fortios 6.4.7 6.4.15
fortinet / fortios 7.0.1 7.0.13
fortinet / fortios 7.2.0 7.2.6
fortinet / fortiproxy 7.0.0 7.0.13
fortinet / fortiproxy 7.2.0 7.2.7