Fortinet FortiOS Ips Engine vulnerabilities

2 CVEs affecting Fortinet FortiOS Ips Engine, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-40718, published 2023-10-10.

More from Fortinet.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-5592, published 2019-08-23. Medium severity, CVSS 5.9. EPSS: 0.7% chance of exploitation in the next 30 days. Multiple padding oracle vulnerabilities (Zombie POODLE, GOLDENDOODLE, OpenSSL 0-length) in the CBC padding implementation of FortiOS IPS engine version 5.000 to 5.006, 4.000 to 4.036, 4.200 to 4.219,…
• CVE-2023-40718, published 2023-10-10. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. A interpretation conflict in Fortinet IPS Engine versions 7.321, 7.166 and 6.158 allows attacker to evade IPS features via crafted TCP packets.