CVE-2015-2281: Fortinet Single Sign On

High severity, CVSS 7.5. EPSS: 10.3% chance of exploitation in the next 30 days.

Stack-based buffer overflow in collectoragent.exe in Fortinet Single Sign On (FSSO) before build 164 allows remote attackers to execute arbitrary code via a large PROCESS_HELLO message to the Message Dispatcher on TCP port 8000.

Affected products

• Fortinet Single Sign On: version 4.3 only

Published 2015-03-19. Last modified 2026-06-17.