CVE-2019-17657: Fortinet Fortianalyzer

High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days.

An Uncontrolled Resource Consumption vulnerability in Fortinet FortiSwitch below 3.6.11, 6.0.6 and 6.2.2, FortiAnalyzer below 6.2.3, FortiManager below 6.2.3 and FortiAP-S/W2 below 6.2.2 may allow an attacker to cause admin webUI denial of service (DoS) via handling special crafted HTTP requests/responses in pieces slowly, as demonstrated by Slow HTTP DoS Attacks.

Affected products

• Fortinet Fortianalyzer: before 6.2.3 (fixed in 6.2.3)
• Fortinet Fortiap-S: before 6.2.2 (fixed in 6.2.2)
• Fortinet Fortiap-w2: before 6.2.2 (fixed in 6.2.2)
• Fortinet FortiManager: before 6.2.3 (fixed in 6.2.3)
• Fortinet Fortiswitch: before 3.6.11 (fixed in 3.6.11); from 6.0.0, before 6.0.6 (fixed in 6.0.6); from 6.2.0, before 6.2.2 (fixed in 6.2.2)

Published 2020-04-07. Last modified 2026-06-17.