{"id":"CVE-2023-29181","revision":null,"records":[{"revision":"05ffb9bacc974040a60497b5db7bc2b7","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2023-29181","aliases":[],"title":"A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4, FortiOS 7.0.0 through 7.0.11, FortiOS 6.4.0 through 6.4.12, FortiOS 6.2.0 through 6.2.14, FortiOS 6.0.0 through 6.0.16, FortiOS 5.6 all vers…","description":"A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4, FortiOS 7.0.0 through 7.0.11, FortiOS 6.4.0 through 6.4.12, FortiOS 6.2.0 through 6.2.14, FortiOS 6.0.0 through 6.0.16, FortiOS 5.6 all versions, FortiOS 5.4 all versions, FortiOS 5.2 all versions, FortiOS 5.0 all versions, FortiOS 4.3 all versions, FortiOS 4.2 all versions, FortiOS 4.1 all versions, FortiOS 4.0 all versions, FortiPAM 1.0 all versions, FortiProxy 7.2.0 through 7.2.4, FortiProxy 7.0.0 through 7.0.10, FortiProxy 2.0.0 through 2.0.12, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions allows attacker to execute unauthorized code or commands via specially crafted command.","state":0,"publishedAt":"2024-02-22T09:40:06.212+00:00","modifiedAt":"2026-10-22T13:48:28.741+00:00","affected":[{"ecosystem":"Vendor product","name":"FortiOS","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Fortinet\",\n \"product\": \"FortiOS\",\n \"cpes\": [\n \"cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.2.14:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.2.13:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.0.16:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.0.15:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.0.14:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.0.13:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.0.12:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.0.11:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.0.10:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.0.9:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.0.8:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.0.7:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.0.6:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.0.5:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.0.4:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.0.3:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.0.2:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.6.14:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.6.13:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.6.12:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.6.11:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.6.10:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.6.9:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.6.8:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.6.7:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.6.6:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.6.5:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.6.4:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.6.3:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.6.2:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.6.1:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.6.0:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.4.13:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.4.12:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.4.11:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.4.10:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.4.9:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.4.8:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.4.7:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.4.6:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.4.5:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.4.4:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.4.3:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.4.2:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.4.1:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.4.0:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.2.15:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.2.14:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.2.13:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.2.12:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.2.11:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.2.10:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.2.9:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.2.8:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.2.7:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.2.6:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.2.5:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.2.4:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.2.3:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.2.2:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.2.1:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.2.0:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.0.14:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.0.13:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.0.12:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.0.11:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.0.10:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.0.9:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.0.8:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.0.7:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.0.6:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.0.5:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.0.4:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.0.3:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.0.2:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.0.1:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:5.0.0:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.3.19:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.3.18:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.3.17:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.3.16:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.3.15:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.3.14:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.3.13:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.3.12:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.3.11:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.3.10:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.3.9:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.3.8:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.3.7:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.3.6:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.3.5:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.3.4:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.3.3:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.3.2:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.3.1:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.3.0:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.2.16:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.2.15:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.2.14:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.2.13:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.2.12:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.2.11:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.2.10:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.2.9:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.2.8:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.2.7:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.2.6:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.2.5:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.2.4:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.2.3:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.2.2:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.2.1:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.2.0:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.1.11:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.1.10:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.1.9:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.1.8:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.1.7:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.1.6:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.1.5:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.1.4:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.1.3:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.1.2:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.1.1:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.0.4:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.0.3:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.0.2:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.0.1:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortios:4.0.0:*:*:*:*:*:*:*\"\n ],\n \"defaultStatus\": \"unaffected\",\n \"versions\": [\n {\n \"versionType\": \"semver\",\n \"version\": \"7.2.0\",\n \"lessThanOrEqual\": \"7.2.4\",\n \"status\": \"affected\"\n },\n {\n \"versionType\": \"semver\",\n \"version\": \"7.0.0\",\n \"lessThanOrEqual\": \"7.0.11\",\n \"status\": \"affected\"\n },\n {\n \"versionType\": \"semver\",\n \"version\": \"6.4.0\",\n \"lessThanOrEqual\": \"6.4.12\",\n \"status\": \"affected\"\n },\n {\n \"versionType\": \"semver\",\n \"version\": \"6.2.0\",\n \"lessThanOrEqual\": \"6.2.14\",\n \"status\": \"affected\"\n },\n {\n \"versionType\": \"semver\",\n \"version\": \"6.0.0\",\n \"lessThanOrEqual\": \"6.0.16\",\n \"status\": \"affected\"\n },\n {\n \"versionType\": \"semver\",\n \"version\": \"5.6.0\",\n \"lessThanOrEqual\": \"5.6.14\",\n \"status\": \"affected\"\n },\n {\n \"versionType\": \"semver\",\n \"version\": \"5.4.0\",\n \"lessThanOrEqual\": \"5.4.13\",\n \"status\": \"affected\"\n },\n {\n \"versionType\": \"semver\",\n \"version\": \"5.2.0\",\n \"lessThanOrEqual\": \"5.2.15\",\n \"status\": \"affected\"\n },\n {\n \"versionType\": \"semver\",\n \"version\": \"5.0.0\",\n \"lessThanOrEqual\": \"5.0.14\",\n \"status\": \"affected\"\n },\n {\n \"versionType\": \"semver\",\n \"version\": \"4.3.0\",\n \"lessThanOrEqual\": \"4.3.19\",\n \"status\": \"affected\"\n },\n {\n \"versionType\": \"semver\",\n \"version\": \"4.2.0\",\n \"lessThanOrEqual\": \"4.2.16\",\n \"status\": \"affected\"\n },\n {\n \"versionType\": \"semver\",\n \"version\": \"4.1.1\",\n \"lessThanOrEqual\": \"4.1.11\",\n \"status\": \"affected\"\n },\n {\n \"versionType\": \"semver\",\n \"version\": \"4.0.0\",\n \"lessThanOrEqual\": \"4.0.4\",\n \"status\": \"affected\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"FortiPAM","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Fortinet\",\n \"product\": \"FortiPAM\",\n \"cpes\": [\n \"cpe:2.3:o:fortinet:fortipam:1.0.3:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortipam:1.0.2:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortipam:1.0.1:*:*:*:*:*:*:*\",\n \"cpe:2.3:o:fortinet:fortipam:1.0.0:*:*:*:*:*:*:*\"\n ],\n \"defaultStatus\": \"unaffected\",\n \"versions\": [\n {\n \"versionType\": \"semver\",\n \"version\": \"1.0.0\",\n \"lessThanOrEqual\": \"1.0.3\",\n \"status\": \"affected\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"FortiProxy","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Fortinet\",\n \"product\": \"FortiProxy\",\n \"cpes\": [\n \"cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:2.0.12:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:2.0.11:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:2.0.10:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:2.0.9:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:2.0.8:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:2.0.7:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:2.0.6:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:2.0.5:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:2.0.4:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:2.0.3:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:2.0.2:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:2.0.1:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:1.2.13:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:1.2.12:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:1.2.11:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:1.2.10:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:1.2.9:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:1.2.8:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:1.2.7:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:1.2.6:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:1.2.5:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:1.2.4:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:1.2.3:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:1.2.2:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:1.2.1:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:01.02.00:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:1.1.6:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:1.1.5:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:1.1.4:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:01.01.03:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:01.01.02:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:01.01.01:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:01.01.00:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:01.00.07:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:01.00.06:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:01.00.05:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:01.00.04:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:01.00.03:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:01.00.02:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:01.00.01:*:*:*:*:*:*:*\",\n \"cpe:2.3:a:fortinet:fortiproxy:01.00.00:*:*:*:*:*:*:*\"\n ],\n \"defaultStatus\": \"unaffected\",\n \"versions\": [\n {\n \"versionType\": \"semver\",\n \"version\": \"7.2.0\",\n \"lessThanOrEqual\": \"7.2.4\",\n \"status\": \"affected\"\n },\n {\n \"versionType\": \"semver\",\n \"version\": \"7.0.0\",\n \"lessThanOrEqual\": \"7.0.10\",\n \"status\": \"affected\"\n },\n {\n \"versionType\": \"semver\",\n \"version\": \"2.0.0\",\n \"lessThanOrEqual\": \"2.0.12\",\n \"status\": \"affected\"\n },\n {\n \"versionType\": \"semver\",\n \"version\": \"1.2.1\",\n \"lessThanOrEqual\": \"1.2.13\",\n \"status\": \"affected\"\n },\n {\n \"version\": \"01.02.00\",\n \"status\": \"affected\"\n },\n {\n \"versionType\": \"semver\",\n \"version\": \"1.1.4\",\n \"lessThanOrEqual\": \"1.1.6\",\n \"status\": \"affected\"\n },\n {\n \"versionType\": \"semver\",\n \"version\": \"01.01.00\",\n \"lessThanOrEqual\": \"01.01.03\",\n \"status\": \"affected\"\n },\n {\n \"versionType\": \"semver\",\n \"version\": \"01.00.00\",\n \"lessThanOrEqual\": \"01.00.07\",\n \"status\": \"affected\"\n }\n ]\n }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C","score":8.3,"severity":"HIGH"}],"references":["https://fortiguard.com/psirt/FG-IR-23-119"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2023-29181","license":"CVE Program Terms of Use","key":"cve-program:CVE-2023-29181","identifiers":["CVE-2023-29181"]},"retained":false,"historicalAffected":[]}],"coverage":[{"source":"cisa-kev:global","scope":"Complete CISA KEV catalog; all vendors. Missing entries do not establish absence of exploitation.","generation":"2026-11-08T08:01:16.4582549+00:00","complete":true,"records":1769,"lastAttemptAt":"2026-11-08T08:01:16.4582549+00:00","lastSuccessAt":"2026-11-08T08:01:16.6552308+00:00","error":null,"lastVerifiedAt":"2026-11-08T08:01:16.655233+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"cve-program","scope":"Official CVE Program baseline and cumulative hourly delta; all vendors, published and rejected records","generation":"cve-eaa64dac63caa79c8d4905619258c41c51b39e461b996124e1a21b5e85e7e738-e58a079eb6f76d5949b871c295ad9e8f78e928765ff9950581a38d46375b9852","complete":true,"records":421096,"lastAttemptAt":"2026-11-08T07:59:14.338564+00:00","lastSuccessAt":"2026-11-08T07:59:14.3145447+00:00","error":null,"lastVerifiedAt":"2026-11-08T07:59:14.338564+00:00","snapshotPublishedAt":"2026-11-08T07:27:32+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"euvd","scope":"Rolling EUVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global EUVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-ce0df89a405747cda5b7c61ae0b48fb2","complete":true,"records":13633,"lastAttemptAt":"2026-11-08T08:01:42.629051+00:00","lastSuccessAt":"2026-11-08T05:08:40.263+00:00","error":null,"lastVerifiedAt":"2026-11-08T05:08:40.263+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13685,"expectedIdentifiers":13685,"failedIdentifiers":0},{"source":"first-epss:nuget","scope":"FIRST EPSS for explicit CVE aliases in the collected public NuGet archive. Not a global EPSS backfill.","generation":"2026-11-08T08:01:16.4582549+00:00","complete":true,"records":1096,"lastAttemptAt":"2026-11-08T08:01:16.4582549+00:00","lastSuccessAt":"2026-11-08T08:01:16.8174871+00:00","error":null,"lastVerifiedAt":"2026-11-08T08:01:16.8174888+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"nvd","scope":"Rolling NVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global NVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-1ec7239e56a54da3b2b0610ad89103be","complete":true,"records":13645,"lastAttemptAt":"2026-11-08T08:01:42.0530448+00:00","lastSuccessAt":"2026-11-08T08:01:42.049+00:00","error":null,"lastVerifiedAt":"2026-11-08T08:01:42.049+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13685,"expectedIdentifiers":13685,"failedIdentifiers":0},{"source":"osv:Go","scope":"Complete OSV Go ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"go-0eb4d6dde62dffacd040ad992d4fd5a65cd7d0dc5f5f4cfa8b41967fc6f9ca5f","complete":true,"records":9914,"lastAttemptAt":"2026-11-08T08:01:16.3917011+00:00","lastSuccessAt":"2026-11-06T20:10:36.6450506+00:00","error":null,"lastVerifiedAt":"2026-11-08T08:01:16.3917011+00:00","snapshotPublishedAt":"2026-11-06T20:02:57+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:NuGet","scope":"Complete OSV NuGet ecosystem archive, including GitHub Advisory Database records; NuGet version matching only","generation":"nuget-fde804134ecdda0ddd5ff5c26ee1fff5a6fa659311f7ef2e51c6ad54964db0e2","complete":true,"records":1971,"lastAttemptAt":"2026-11-08T07:59:14.4078984+00:00","lastSuccessAt":"2026-11-06T19:03:17.0399903+00:00","error":null,"lastVerifiedAt":"2026-11-08T07:59:14.4078984+00:00","snapshotPublishedAt":"2026-11-06T18:17:57+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:crates.io","scope":"Complete OSV crates.io ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"crates.io-335633e78a15c9cde10a6025895b5617717087fb945489ae7e15d377bacf34a9","complete":true,"records":3055,"lastAttemptAt":"2026-11-08T08:01:16.4078439+00:00","lastSuccessAt":"2026-11-06T16:03:00.7615789+00:00","error":null,"lastVerifiedAt":"2026-11-08T08:01:16.4078439+00:00","snapshotPublishedAt":"2026-11-06T16:02:48+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:npm","scope":"Complete OSV npm ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"npm-8efbf882841c7fda0cba0c3b55677f4781f461b96ab83577ad2701c4eaf88b1e","complete":true,"records":231293,"lastAttemptAt":"2026-11-08T08:01:16.2657557+00:00","lastSuccessAt":"2026-11-08T08:01:14.837451+00:00","error":null,"lastVerifiedAt":"2026-11-08T08:01:16.2657557+00:00","snapshotPublishedAt":"2026-11-08T07:33:16+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null}]}