Vulnerability Database

319,590

Total vulnerabilities in the database

CVE-2023-45584

A double free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.4.0 through 7.4.1, FortiProxy 7.2.0 through 7.2.7, FortiProxy 7.0.0 through 7.0.13 allows a privileged attacker to execute code or commands via crafted HTTP or HTTPs requests.

  • Published: Aug 12, 2025
  • Updated: Jan 15, 2026
  • CVE: CVE-2023-45584
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.6
  • AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

CWEs:

Software From Fixed in
fortinet / fortios 7.4.0 7.4.0.x
fortinet / fortios 7.2.0 7.2.6
fortinet / fortios 6.4.0 7.0.13
fortinet / fortipam 1.0.0 1.1.2.x
fortinet / fortiproxy 7.2.0 7.2.8
fortinet / fortiproxy 7.0.0 7.0.14
fortinet / fortiproxy 7.4.0 7.4.2