Dashboard / CVE-2023-36641

CVE-2023-36641

MEDIUM
MEDIUM Priority: 0.09 BB Relevance: 63/100
Published: 2023-11-14 Modified: 2026-10-22 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

A numeric truncation error vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiProxy 7.2.0 through 7.2.4, FortiProxy 7.0.0 through 7.0.10, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions allows attacker to denial of service via specifically crafted HTTP requests.

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
fortinet fortios 6.0.0 – 6.0.17
fortinet fortiproxy 1.0.0 – 1.0.7

References & Advisories (1)

Bug Bounty Relevance

63 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

6.5 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

1.36%
Raw Score 0.013620
Percentile 71.7%
Date 2026-10-29

EPSS Trend

2026-10-29
0.01362
2026-10-28
0.01362

Intelligence Sources

nvd ref →

External Links