ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 267/275 feeds/APIs · 469/469 docs · 9/9 advisories · checked 08:02 UTC Customize Public modeDiscuss ChangeIntel on Discord
CVE-2022-42472Published

A improper neutralization of crlf sequences in http headers ('http response splitting') vulnerability in Fortinet FortiOS 7.2.0 through 7.2.2, FortiOS 7.0.0 through 7.0.8, FortiOS 6.4.0 through 6.4.12, FortiOS 6.2 all versions, FortiOS 6.0 …

Recorded JSON

cve-program · CVE-2022-42472

Published

FortiProxy

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Fortinet",
                    "product": "FortiProxy",
                    "cpes": [
                        "cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:2.0.10:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:2.0.9:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:2.0.8:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:2.0.7:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:2.0.6:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:2.0.5:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:2.0.4:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:2.0.3:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:2.0.2:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:2.0.1:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:1.2.13:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:1.2.12:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:1.2.11:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:1.2.10:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:1.2.9:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:1.2.8:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:1.2.7:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:1.2.6:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:1.2.5:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:1.2.4:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:1.2.3:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:1.2.2:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:1.2.1:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:01.02.00:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:1.1.6:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:1.1.5:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:1.1.4:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:01.01.03:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:01.01.02:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:01.01.01:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiproxy:01.01.00:*:*:*:*:*:*:*"
                    ],
                    "defaultStatus": "unaffected",
                    "versions": [
                        {
                            "versionType": "semver",
                            "version": "7.2.0",
                            "lessThanOrEqual": "7.2.1",
                            "status": "affected"
                        },
                        {
                            "versionType": "semver",
                            "version": "7.0.0",
                            "lessThanOrEqual": "7.0.7",
                            "status": "affected"
                        },
                        {
                            "versionType": "semver",
                            "version": "2.0.0",
                            "lessThanOrEqual": "2.0.10",
                            "status": "affected"
                        },
                        {
                            "versionType": "semver",
                            "version": "1.2.1",
                            "lessThanOrEqual": "1.2.13",
                            "status": "affected"
                        },
                        {
                            "version": "01.02.00",
                            "status": "affected"
                        },
                        {
                            "versionType": "semver",
                            "version": "1.1.4",
                            "lessThanOrEqual": "1.1.6",
                            "status": "affected"
                        },
                        {
                            "versionType": "semver",
                            "version": "01.01.00",
                            "lessThanOrEqual": "01.01.03",
                            "status": "affected"
                        }
                    ]
                }

FortiOS

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Fortinet",
                    "product": "FortiOS",
                    "cpes": [
                        "cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.2.17:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.2.16:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.2.15:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.2.14:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.2.13:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.0.18:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.0.17:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.0.16:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.0.15:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.0.14:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.0.13:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.0.12:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.0.11:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.0.10:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.0.9:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.0.8:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.0.7:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.0.6:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.0.5:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.0.4:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.0.3:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.0.2:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:*",
                        "cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*"
                    ],
                    "defaultStatus": "unaffected",
                    "versions": [
                        {
                            "versionType": "semver",
                            "version": "7.2.0",
                            "lessThanOrEqual": "7.2.2",
                            "status": "affected"
                        },
                        {
                            "versionType": "semver",
                            "version": "7.0.0",
                            "lessThanOrEqual": "7.0.8",
                            "status": "affected"
                        },
                        {
                            "versionType": "semver",
                            "version": "6.4.0",
                            "lessThanOrEqual": "6.4.12",
                            "status": "affected"
                        },
                        {
                            "versionType": "semver",
                            "version": "6.2.0",
                            "lessThanOrEqual": "6.2.17",
                            "status": "affected"
                        },
                        {
                            "versionType": "semver",
                            "version": "6.0.0",
                            "lessThanOrEqual": "6.0.18",
                            "status": "affected"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 8 Nov 08:02 UTC · 267 of 275 readable · 265 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.