CVE-2023-44256: Fortinet Fortianalyzer

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

A server-side request forgery vulnerability [CWE-918] in Fortinet FortiAnalyzer version 7.4.0, version 7.2.0 through 7.2.3 and before 7.0.8 and FortiManager version 7.4.0, version 7.2.0 through 7.2.3 and before 7.0.8 allows a remote attacker with low privileges to view sensitive data from internal servers or perform a local port scan via a crafted HTTP request.

Affected products

• Fortinet Fortianalyzer: from 6.4.8, up to and including 6.4.13; from 7.0.2, up to and including 7.0.8; from 7.2.0, up to and including 7.2.3; version 7.4.0 only
• Fortinet FortiManager: from 7.0.0, up to and including 7.0.8; from 7.2.0, up to and including 7.2.3; version 7.4.0 only

Published 2023-10-20. Last modified 2026-06-17.