`Host` header injection Fortinet PSIRT Advisories Fortinet PSIRT Contact: Website: https://fortiguard.fortinet.com/faq/psirt-contact FG-IR-23-494 Final 1 1 2025-01-14T00:00:00 Current version 2025-01-14T00:00:00 2026-01-07T00:00:00 An externally controlled reference to a resource in another sphere vulnerability [CWE-610] in multiple products may allow an unauthenticated attacker to poison web caches between the device and the attacker via crafted HTTP requests, where the Host header points to an arbitrary webserver. None Improper access control FortiWLC 8.6 all versionsFortiWLC 8.5 all versionsFortiWLC 8.4 all versionsFortiVoice 7.2 all versions are not affectedFortiVoice version 7.0.0 through 7.0.1FortiVoice version 6.4.0 through 6.4.8FortiVoice version 6.0.0 through 6.0.11FortiTester 7.4 all versions are not affectedFortiTester 7.3 all versions are not affectedFortiTester version 7.2.0 through 7.2.1FortiTester 7.1 all versionsFortiTester 7.0 all versionsFortiTester 4.2 all versionsFortiTester 4.1 all versionsFortiTester 4.0 all versionsFortiTester 3.9 all versionsFortiTester 3.8 all versionsFortiTester 3.7 all versionsFortiTester 3.6 all versionsFortiTester 3.5 all versionsFortiTester 3.4 all versionsFortiTester 3.3 all versionsFortiSOAR on-premise 7.6 all versions are not affectedFortiSOAR on-premise 7.5 all versions are not affectedFortiSOAR on-premise 7.4 all versions are not affectedFortiSOAR on-premise 7.3 all versions are not affectedFortiSOAR on-premise 7.2 all versionsFortiSOAR on-premise 7.0 all versionsFortiSOAR on-premise 6.4 all versionsFortiRecorder 7.2 all versions are not affectedFortiRecorder 7.0 all versions are not affectedFortiRecorder version 6.4.0 through 6.4.2FortiRecorder version 6.0.0 through 6.0.10FortiRecorder 2.7 all versionsFortiRecorder 2.6 all versionsFortiProxy 7.6 all versions are not affectedFortiProxy 7.4 all versions are not affectedFortiProxy 7.2 all versions are not affectedFortiProxy version 7.0.0 through 7.0.4FortiProxy 2.0 all versionsFortiProxy 1.2 all versionsFortiProxy 1.1 all versionsFortiProxy 1.0 all versionsFortiPortal 7.4 all versions are not affectedFortiPortal 7.2 all versions are not affectedFortiPortal 7.0 all versions are not affectedFortiPortal version 6.0.0 through 6.0.9FortiOS 7.6 all versions are not affectedFortiOS 7.4 all versions are not affectedFortiOS version 7.2.0 through 7.2.4FortiOS 7.0 all versionsFortiOS 6.4 all versionsFortiOS 6.2 all versionsFortiOS 6.0 all versionsFortiNDR 7.6 all versions are not affectedFortiNDR 7.4 all versions are not affectedFortiNDR version 7.2.0FortiNDR version 7.1.0FortiNDR 7.0 all versionsFortiNDR 1.5 all versionsFortiNDR 1.4 all versionsFortiNDR 1.3 all versionsFortiNDR 1.2 all versionsFortiNDR 1.1 all versionsFortiManager 7.6 all versions are not affectedFortiManager version 7.4.0 through 7.4.3FortiManager 7.2 all versionsFortiManager 7.0 all versionsFortiManager 6.4 all versionsFortiManager 6.2 all versionsFortiMail 7.6 all versions are not affectedFortiMail 7.4 all versions are not affectedFortiMail 7.2 all versions are not affectedFortiMail version 7.0.0 through 7.0.3FortiMail 6.4 all versionsFortiMail 6.2 all versionsFortiMail 6.0 all versionsFortiMail 5.4 all versionsFortiAuthenticator 6.6 all versions are not affectedFortiAuthenticator 6.5 all versions are not affectedFortiAuthenticator version 6.4.0 through 6.4.1FortiAuthenticator version 6.3.0 through 6.3.3FortiAuthenticator 6.2 all versionsFortiAuthenticator 6.1 all versionsFortiAuthenticator 6.0 all versionsFortiAuthenticator 5.5 all versionsFortiAuthenticator 5.4 all versionsFortiAuthenticator 5.3 all versionsFortiAuthenticator 5.2 all versionsFortiAuthenticator 5.1 all versionsFortiAnalyzer 7.6 all versions are not affectedFortiAnalyzer version 7.4.0 through 7.4.2FortiAnalyzer 7.2 all versionsFortiAnalyzer 7.0 all versionsFortiAnalyzer 6.4 all versionsFortiAnalyzer 6.2 all versionsAt leastFortiSwitch 7.6 all versions are not affectedFortiSwitch 7.4 all versions are not affectedFortiSwitch 7.2 all versions are not affectedFortiSwitch version 7.0.0 through 7.0.4FortiSwitch version 6.4.0 through 6.4.10FortiSwitch 6.2 all versionsFortiSwitch 6.0 all versionsAt leastFortiDDoS-F 7.0 all versions are not affectedFortiDDoS-F 6.6 all versions are not affectedFortiDDoS-F 6.5 all versions are not affectedFortiDDoS-F 6.4 all versions are not affectedFortiDDoS-F version 6.3.0 through 6.3.3FortiDDoS-F 6.2 all versionsFortiDDoS-F 6.1 all versionsAt leastFortiDDoS 5.7 all versions are not affectedFortiDDoS 5.6 all versions are not affectedFortiDDoS version 5.5.0 through 5.5.1FortiDDoS 5.4 all versionsFortiDDoS 5.3 all versionsFortiDDoS 5.2 all versionsFortiDDoS 5.1 all versionsFortiDDoS 5.0 all versionsFortiDDoS 4.7 all versionsFortiDDoS 4.6 all versionsFortiDDoS 4.5 all versionsAt leastFortiADC 7.6 all versions are not affectedFortiADC 7.4 all versions are not affectedFortiADC 7.2 all versions are not affectedFortiADC 7.1 all versions are not affectedFortiADC version 7.0.0 through 7.0.1FortiADC version 6.2.0 through 6.2.3FortiADC 6.1 all versionsFortiADC 6.0 all versionsFortiADC 5.4 all versionsFortiADC 5.3 all versionsFortiADC 5.2 all versionsFortiADC 5.1 all versionsFortiADC 5.0 all versions FortiOSAdministrative InterfaceUpgrade to FortiOS version 7.0.6 and above,Upgrade to FortiOS version 7.2.1 and above.ANDSet the admin-host property to the device hostname, which will disable Host redirection:config system global set admin-host <string> "Administrative host for HTTP and HTTPs. When set, will be used in lieu of the client's Host header for any redirection"SSLVPN interfaceUpgrade to FortiOS version 7.4.0 or aboveUpgrade to FortiOS version 7.2.5 or aboveANDSet the server-hostname property to the device hostname, which will disable Host redirection for SSL VPN:config vpn ssl settings set server-hostname Server hostname for HTTPS. When set, will be used for SSL VPN web proxy host header for any redirection.Webfilter interface (port 8008)Upgrade to FortiOS version 7.4.0 or aboveUpgrade to FortiOS version 7.2.5 or aboveUpgrade to FortiOS version 7.0.12 or aboveUpgrade to FortiOS version 6.4.13 or aboveFortiProxyAdministrative InterfaceUpgrade to FortiProxy version 7.0.5 and aboveANDSet the admin-host property to the device hostname, which will disable Host redirection:config system global set admin-host <string> "Administrative host for HTTP and HTTPs. When set, will be used in lieu of the client's Host header for any redirection"SSLVPN interfaceUpgrade to FortiProxy version 7.4.0 or aboveANDSet the server-hostname property to the device hostname, which will disable Host redirection for SSL VPN:config vpn ssl settings set server-hostname Server hostname for HTTPS. When set, will be used for SSL VPN web proxy host header for any redirection.WebFilter interface (port 8008)Upgrade to FortiProxy version 7.4.0 or aboveUpgrade to FortiRecorder version 7.0.0 or above Upgrade to FortiRecorder version 6.4.3 or above Upgrade to FortiRecorder version 6.0.11 or above Upgrade to FortiNDR version 7.4.0 or aboveFortiAnalyzer & FortiManagerUpgrade to version 7.6.0 or above Upgrade to version 7.4.4 or above Set the admin-host property to the device hostname, which will disable Host redirection for administrative interface.config system global set admin-host <string> endFortiNDRUpgrade to FortiNDR version 7.2.1 or aboveUpgrade to FortiNDR version 7.1.1 or aboveANDSet the https-redirect-host property to the device hostname, which will disable Host redirection:config system global set https-redirect-host <string> "Administrative host for HTTP and HTTPs. When set, will be used in lieu of the client's Host header for any redirection"endFortiADCUpgrade to FortiADC version 7.1.0 or aboveUpgrade to FortiADC version 7.0.2 or aboveUpgrade to FortiADC version 6.2.4 or aboveANDSet the admin-host property to the device hostname, which will disable Host redirection: config system global set admin-host <string> "Administrative host for HTTP and HTTPs. When set, will be used in lieu of the client's Host header for any redirection"FortiDDOS-FUpgrade to FortiDDoS-F version 6.4.0 or aboveUpgrade to FortiDDoS-F version 6.3.4 or aboveANDSet the admin-host property to the device hostname, which will disable Host redirection: config system global set admin-host <string> "Administrative host for HTTP and HTTPs. When set, will be used in lieu of the client's Host header for any redirection" Upgrade to FortiSwitch version 7.2.0 or above Upgrade to FortiSwitch version 7.0.5 or above Upgrade to FortiSwitch version 6.4.11 or above Upgrade to FortiVoice version 7.0.2 or aboveUpgrade to FortiVoice version 6.4.9 or aboveUpgrade to FortiMail version 7.2.0 or above Upgrade to FortiMail version 7.0.4 or above Upgrade to FortiWLC version 8.6.7 or above Upgrade to FortiAuthenticator version 6.4.2 or above Upgrade to FortiAuthenticator version 6.3.4 or above Upgrade to FortiDDoS version 5.6.0 or above Upgrade to FortiDDoS version 5.5.2 or above Upgrade to FortiSOAR version 7.3.0 or above Upgrade to FortiTester version 7.3.0 or above Upgrade to FortiTester version 7.2.2 or above Internally reported and discovered by Théo Leleu of Fortinet Product Security team. FortiADC 7.0.1 FortiADC 7.0.0 FortiADC 6.2.3 FortiADC 6.2.2 FortiADC 6.2.1 FortiADC 6.2.0 FortiADC 6.1.6 FortiADC 6.1.5 FortiADC 6.1.4 FortiADC 6.1.3 FortiADC 6.1.2 FortiADC 6.1.1 FortiADC 6.1.0 FortiADC 6.0.4 FortiADC 6.0.3 FortiADC 6.0.2 FortiADC 6.0.1 FortiADC 6.0.0 FortiADC 5.4.5 FortiADC 5.4.4 FortiADC 5.4.3 FortiADC 5.4.2 FortiADC 5.4.1 FortiADC 5.4.0 FortiADC 5.3.7 FortiADC 5.3.6 FortiADC 5.3.5 FortiADC 5.3.4 FortiADC 5.3.3 FortiADC 5.3.2 FortiADC 5.3.1 FortiADC 5.3.0 FortiADC 5.2.8 FortiADC 5.2.7 FortiADC 5.2.6 FortiADC 5.2.5 FortiADC 5.2.4 FortiADC 5.2.3 FortiADC 5.2.2 FortiADC 5.2.1 FortiADC 5.2.0 FortiADC 5.1.7 FortiADC 5.1.6 FortiADC 5.1.5 FortiADC 5.1.4 FortiADC 5.1.3 FortiADC 5.1.2 FortiADC 5.1.1 FortiADC 5.1.0 FortiADC 5.0.4 FortiADC 5.0.3 FortiADC 5.0.2 FortiADC 5.0.1 FortiADC 5.0.0 FortiAnalyzer 7.4.2 FortiAnalyzer 7.4.1 FortiAnalyzer 7.4.0 FortiAnalyzer 7.2.12 FortiAnalyzer 7.2.11 FortiAnalyzer 7.2.10 FortiAnalyzer 7.2.9 FortiAnalyzer 7.2.8 FortiAnalyzer 7.2.7 FortiAnalyzer 7.2.6 FortiAnalyzer 7.2.5 FortiAnalyzer 7.2.4 FortiAnalyzer 7.2.3 FortiAnalyzer 7.2.2 FortiAnalyzer 7.2.1 FortiAnalyzer 7.2.0 FortiAnalyzer 7.0.16 FortiAnalyzer 7.0.15 FortiAnalyzer 7.0.14 FortiAnalyzer 7.0.13 FortiAnalyzer 7.0.12 FortiAnalyzer 7.0.11 FortiAnalyzer 7.0.10 FortiAnalyzer 7.0.9 FortiAnalyzer 7.0.8 FortiAnalyzer 7.0.7 FortiAnalyzer 7.0.6 FortiAnalyzer 7.0.5 FortiAnalyzer 7.0.4 FortiAnalyzer 7.0.3 FortiAnalyzer 7.0.2 FortiAnalyzer 7.0.1 FortiAnalyzer 7.0.0 FortiAnalyzer 6.4.15 FortiAnalyzer 6.4.14 FortiAnalyzer 6.4.13 FortiAnalyzer 6.4.12 FortiAnalyzer 6.4.11 FortiAnalyzer 6.4.10 FortiAnalyzer 6.4.9 FortiAnalyzer 6.4.8 FortiAnalyzer 6.4.7 FortiAnalyzer 6.4.6 FortiAnalyzer 6.4.5 FortiAnalyzer 6.4.4 FortiAnalyzer 6.4.3 FortiAnalyzer 6.4.2 FortiAnalyzer 6.4.1 FortiAnalyzer 6.4.0 FortiAnalyzer 6.2.13 FortiAnalyzer 6.2.12 FortiAnalyzer 6.2.11 FortiAnalyzer 6.2.10 FortiAnalyzer 6.2.9 FortiAnalyzer 6.2.8 FortiAnalyzer 6.2.7 FortiAnalyzer 6.2.6 FortiAnalyzer 6.2.5 FortiAnalyzer 6.2.4 FortiAnalyzer 6.2.3 FortiAnalyzer 6.2.2 FortiAnalyzer 6.2.1 FortiAnalyzer 6.2.0 FortiAuthenticator 6.4.1 FortiAuthenticator 6.4.0 FortiAuthenticator 6.3.3 FortiAuthenticator 6.3.2 FortiAuthenticator 6.3.1 FortiAuthenticator 6.3.0 FortiAuthenticator 6.2.2 FortiAuthenticator 6.2.1 FortiAuthenticator 6.2.0 FortiAuthenticator 6.1.3 FortiAuthenticator 6.1.2 FortiAuthenticator 6.1.1 FortiAuthenticator 6.1.0 FortiAuthenticator 6.0.8 FortiAuthenticator 6.0.7 FortiAuthenticator 6.0.6 FortiAuthenticator 6.0.5 FortiAuthenticator 6.0.4 FortiAuthenticator 6.0.3 FortiAuthenticator 6.0.2 FortiAuthenticator 6.0.1 FortiAuthenticator 6.0.0 FortiAuthenticator 5.5.0 FortiAuthenticator 5.4.1 FortiAuthenticator 5.4.0 FortiAuthenticator 5.3.1 FortiAuthenticator 5.3.0 FortiAuthenticator 5.2.2 FortiAuthenticator 5.2.1 FortiAuthenticator 5.2.0 FortiAuthenticator 5.1.2 FortiAuthenticator 5.1.1 FortiAuthenticator 5.1.0 FortiDDoS 5.5.1 FortiDDoS 5.5.0 FortiDDoS 5.4.3 FortiDDoS 5.4.2 FortiDDoS 5.4.1 FortiDDoS 5.4.0 FortiDDoS 5.3.2 FortiDDoS 5.3.1 FortiDDoS 5.3.0 FortiDDoS 5.2.0 FortiDDoS 5.1.0 FortiDDoS 5.0.0 FortiDDoS 4.7.0 FortiDDoS 4.6.0 FortiDDoS 4.5.0 FortiDDoS-F 6.3.3 FortiDDoS-F 6.3.2 FortiDDoS-F 6.3.1 FortiDDoS-F 6.3.0 FortiDDoS-F 6.2.3 FortiDDoS-F 6.2.2 FortiDDoS-F 6.2.1 FortiDDoS-F 6.2.0 FortiDDoS-F 6.1.5 FortiDDoS-F 6.1.4 FortiDDoS-F 6.1.3 FortiDDoS-F 6.1.2 FortiDDoS-F 6.1.1 FortiDDoS-F 6.1.0 FortiMail 7.0.3 FortiMail 7.0.2 FortiMail 7.0.1 FortiMail 7.0.0 FortiMail 6.4.8 FortiMail 6.4.7 FortiMail 6.4.6 FortiMail 6.4.5 FortiMail 6.4.4 FortiMail 6.4.3 FortiMail 6.4.2 FortiMail 6.4.1 FortiMail 6.4.0 FortiMail 6.2.9 FortiMail 6.2.8 FortiMail 6.2.7 FortiMail 6.2.6 FortiMail 6.2.5 FortiMail 6.2.4 FortiMail 6.2.3 FortiMail 6.2.2 FortiMail 6.2.1 FortiMail 6.2.0 FortiMail 6.0.12 FortiMail 6.0.11 FortiMail 6.0.10 FortiMail 6.0.9 FortiMail 6.0.8 FortiMail 6.0.7 FortiMail 6.0.6 FortiMail 6.0.5 FortiMail 6.0.4 FortiMail 6.0.3 FortiMail 6.0.2 FortiMail 6.0.1 FortiMail 6.0.0 FortiMail 5.4.12 FortiMail 5.4.11 FortiMail 5.4.10 FortiMail 5.4.9 FortiMail 5.4.8 FortiMail 5.4.7 FortiMail 5.4.6 FortiMail 5.4.5 FortiMail 5.4.4 FortiMail 5.4.3 FortiMail 5.4.2 FortiMail 5.4.1 FortiMail 5.4.0 FortiManager 7.4.3 FortiManager 7.4.2 FortiManager 7.4.1 FortiManager 7.4.0 FortiManager 7.2.12 FortiManager 7.2.11 FortiManager 7.2.10 FortiManager 7.2.9 FortiManager 7.2.8 FortiManager 7.2.7 FortiManager 7.2.6 FortiManager 7.2.5 FortiManager 7.2.4 FortiManager 7.2.3 FortiManager 7.2.2 FortiManager 7.2.1 FortiManager 7.2.0 FortiManager 7.0.16 FortiManager 7.0.15 FortiManager 7.0.14 FortiManager 7.0.13 FortiManager 7.0.12 FortiManager 7.0.11 FortiManager 7.0.10 FortiManager 7.0.9 FortiManager 7.0.8 FortiManager 7.0.7 FortiManager 7.0.6 FortiManager 7.0.5 FortiManager 7.0.4 FortiManager 7.0.3 FortiManager 7.0.2 FortiManager 7.0.1 FortiManager 7.0.0 FortiManager 6.4.15 FortiManager 6.4.14 FortiManager 6.4.13 FortiManager 6.4.12 FortiManager 6.4.11 FortiManager 6.4.10 FortiManager 6.4.9 FortiManager 6.4.8 FortiManager 6.4.7 FortiManager 6.4.6 FortiManager 6.4.5 FortiManager 6.4.4 FortiManager 6.4.3 FortiManager 6.4.2 FortiManager 6.4.1 FortiManager 6.4.0 FortiManager 6.2.13 FortiManager 6.2.12 FortiManager 6.2.11 FortiManager 6.2.10 FortiManager 6.2.9 FortiManager 6.2.8 FortiManager 6.2.7 FortiManager 6.2.6 FortiManager 6.2.5 FortiManager 6.2.4 FortiManager 6.2.3 FortiManager 6.2.2 FortiManager 6.2.1 FortiManager 6.2.0 FortiNDR 7.2.0 FortiNDR 7.1.0 FortiNDR 7.0.7 FortiNDR 7.0.6 FortiNDR 7.0.5 FortiNDR 7.0.4 FortiNDR 7.0.3 FortiNDR 7.0.2 FortiNDR 7.0.1 FortiNDR 7.0.0 FortiNDR 1.5.3 FortiNDR 1.5.2 FortiNDR 1.5.1 FortiNDR 1.5.0 FortiNDR 1.4.0 FortiNDR 1.3.1 FortiNDR 1.3.0 FortiNDR 1.2.0 FortiNDR 1.1.0 FortiOS 7.2.4 FortiOS 7.2.3 FortiOS 7.2.2 FortiOS 7.2.1 FortiOS 7.2.0 FortiOS 7.0.19 FortiOS 7.0.18 FortiOS 7.0.17 FortiOS 7.0.16 FortiOS 7.0.15 FortiOS 7.0.14 FortiOS 7.0.13 FortiOS 7.0.12 FortiOS 7.0.11 FortiOS 7.0.10 FortiOS 7.0.9 FortiOS 7.0.8 FortiOS 7.0.7 FortiOS 7.0.6 FortiOS 7.0.5 FortiOS 7.0.4 FortiOS 7.0.3 FortiOS 7.0.2 FortiOS 7.0.1 FortiOS 7.0.0 FortiOS 6.4.16 FortiOS 6.4.15 FortiOS 6.4.14 FortiOS 6.4.13 FortiOS 6.4.12 FortiOS 6.4.11 FortiOS 6.4.10 FortiOS 6.4.9 FortiOS 6.4.8 FortiOS 6.4.7 FortiOS 6.4.6 FortiOS 6.4.5 FortiOS 6.4.4 FortiOS 6.4.3 FortiOS 6.4.2 FortiOS 6.4.1 FortiOS 6.4.0 FortiOS 6.2.17 FortiOS 6.2.16 FortiOS 6.2.15 FortiOS 6.2.14 FortiOS 6.2.13 FortiOS 6.2.12 FortiOS 6.2.11 FortiOS 6.2.10 FortiOS 6.2.9 FortiOS 6.2.8 FortiOS 6.2.7 FortiOS 6.2.6 FortiOS 6.2.5 FortiOS 6.2.4 FortiOS 6.2.3 FortiOS 6.2.2 FortiOS 6.2.1 FortiOS 6.2.0 FortiOS 6.0.18 FortiOS 6.0.17 FortiOS 6.0.16 FortiOS 6.0.15 FortiOS 6.0.14 FortiOS 6.0.13 FortiOS 6.0.12 FortiOS 6.0.11 FortiOS 6.0.10 FortiOS 6.0.9 FortiOS 6.0.8 FortiOS 6.0.7 FortiOS 6.0.6 FortiOS 6.0.5 FortiOS 6.0.4 FortiOS 6.0.3 FortiOS 6.0.2 FortiOS 6.0.1 FortiOS 6.0.0 FortiPortal 6.0.9 FortiPortal 6.0.8 FortiPortal 6.0.7 FortiPortal 6.0.6 FortiPortal 6.0.5 FortiPortal 6.0.4 FortiPortal 6.0.3 FortiPortal 6.0.2 FortiPortal 6.0.1 FortiPortal 6.0.0 FortiProxy 7.0.4 FortiProxy 7.0.3 FortiProxy 7.0.2 FortiProxy 7.0.1 FortiProxy 7.0.0 FortiProxy 2.0.14 FortiProxy 2.0.13 FortiProxy 2.0.12 FortiProxy 2.0.11 FortiProxy 2.0.10 FortiProxy 2.0.9 FortiProxy 2.0.8 FortiProxy 2.0.7 FortiProxy 2.0.6 FortiProxy 2.0.5 FortiProxy 2.0.4 FortiProxy 2.0.3 FortiProxy 2.0.2 FortiProxy 2.0.1 FortiProxy 2.0.0 FortiProxy 1.2.13 FortiProxy 1.2.12 FortiProxy 1.2.11 FortiProxy 1.2.10 FortiProxy 1.2.9 FortiProxy 1.2.8 FortiProxy 1.2.7 FortiProxy 1.2.6 FortiProxy 1.2.5 FortiProxy 1.2.4 FortiProxy 1.2.3 FortiProxy 1.2.2 FortiProxy 1.2.1 FortiProxy 1.2.0 FortiProxy 1.1.6 FortiProxy 1.1.5 FortiProxy 1.1.4 FortiProxy 1.1.3 FortiProxy 1.1.2 FortiProxy 1.1.1 FortiProxy 1.1.0 FortiProxy 1.0.7 FortiProxy 1.0.6 FortiProxy 1.0.5 FortiProxy 1.0.4 FortiProxy 1.0.3 FortiProxy 1.0.2 FortiProxy 1.0.1 FortiProxy 1.0.0 FortiRecorder 6.4.2 FortiRecorder 6.4.1 FortiRecorder 6.4.0 FortiRecorder 6.0.10 FortiRecorder 6.0.9 FortiRecorder 6.0.8 FortiRecorder 6.0.7 FortiRecorder 6.0.6 FortiRecorder 6.0.5 FortiRecorder 6.0.4 FortiRecorder 6.0.3 FortiRecorder 6.0.2 FortiRecorder 6.0.1 FortiRecorder 6.0.0 FortiRecorder 2.7.7 FortiRecorder 2.7.6 FortiRecorder 2.7.5 FortiRecorder 2.7.4 FortiRecorder 2.7.3 FortiRecorder 2.7.2 FortiRecorder 2.7.1 FortiRecorder 2.7.0 FortiRecorder 2.6.3 FortiRecorder 2.6.2 FortiRecorder 2.6.1 FortiRecorder 2.6.0 FortiSOAR on-premise 7.2.2 FortiSOAR on-premise 7.2.1 FortiSOAR on-premise 7.2.0 FortiSOAR on-premise 7.0.3 FortiSOAR on-premise 7.0.2 FortiSOAR on-premise 7.0.1 FortiSOAR on-premise 7.0.0 FortiSOAR on-premise 6.4.4 FortiSOAR on-premise 6.4.3 FortiSOAR on-premise 6.4.1 FortiSOAR on-premise 6.4.0 FortiSwitch 7.0.4 FortiSwitch 7.0.3 FortiSwitch 7.0.2 FortiSwitch 7.0.1 FortiSwitch 7.0.0 FortiSwitch 6.4.10 FortiSwitch 6.4.9 FortiSwitch 6.4.8 FortiSwitch 6.4.7 FortiSwitch 6.4.6 FortiSwitch 6.4.5 FortiSwitch 6.4.4 FortiSwitch 6.4.3 FortiSwitch 6.4.2 FortiSwitch 6.4.1 FortiSwitch 6.4.0 FortiSwitch 6.2.8 FortiSwitch 6.2.7 FortiSwitch 6.2.6 FortiSwitch 6.2.5 FortiSwitch 6.2.4 FortiSwitch 6.2.3 FortiSwitch 6.2.2 FortiSwitch 6.2.1 FortiSwitch 6.2.0 FortiSwitch 6.0.7 FortiSwitch 6.0.6 FortiSwitch 6.0.5 FortiSwitch 6.0.4 FortiSwitch 6.0.3 FortiSwitch 6.0.2 FortiSwitch 6.0.1 FortiSwitch 6.0.0 FortiTester 7.2.1 FortiTester 7.2.0 FortiTester 7.1.1 FortiTester 7.1.0 FortiTester 7.0.0 FortiTester 4.2.1 FortiTester 4.2.0 FortiTester 4.1.1 FortiTester 4.1.0 FortiTester 4.0.0 FortiTester 3.9.2 FortiTester 3.9.1 FortiTester 3.9.0 FortiTester 3.8.0 FortiTester 3.7.1 FortiTester 3.7.0 FortiTester 3.6.0 FortiTester 3.5.1 FortiTester 3.5.0 FortiTester 3.4.0 FortiTester 3.3.1 FortiTester 3.3.0 FortiVoice 7.0.1 FortiVoice 7.0.0 FortiVoice 6.4.8 FortiVoice 6.4.7 FortiVoice 6.4.6 FortiVoice 6.4.5 FortiVoice 6.4.4 FortiVoice 6.4.3 FortiVoice 6.4.2 FortiVoice 6.4.1 FortiVoice 6.4.0 FortiVoice 6.0.11 FortiVoice 6.0.10 FortiVoice 6.0.9 FortiVoice 6.0.8 FortiVoice 6.0.7 FortiVoice 6.0.6 FortiVoice 6.0.5 FortiVoice 6.0.4 FortiVoice 6.0.3 FortiVoice 6.0.2 FortiVoice 6.0.1 FortiVoice 6.0.0 FortiWLC 8.6.7 FortiWLC 8.6.6 FortiWLC 8.6.5 FortiWLC 8.6.4 FortiWLC 8.6.3 FortiWLC 8.6.2 FortiWLC 8.6.1 FortiWLC 8.6.0 FortiWLC 8.5.5 FortiWLC 8.5.4 FortiWLC 8.5.3 FortiWLC 8.5.2 FortiWLC 8.5.1 FortiWLC 8.5.0 FortiWLC 8.4.8 FortiWLC 8.4.7 FortiWLC 8.4.6 FortiWLC 8.4.5 FortiWLC 8.4.4 FortiWLC 8.4.2 FortiWLC 8.4.1 FortiWLC 8.4.0 CVE-2022-23439 FortiADC-7.0.1 FortiADC-7.0.0 FortiADC-6.2.3 FortiADC-6.2.2 FortiADC-6.2.1 FortiADC-6.2.0 FortiADC-6.1.6 FortiADC-6.1.5 FortiADC-6.1.4 FortiADC-6.1.3 FortiADC-6.1.2 FortiADC-6.1.1 FortiADC-6.1.0 FortiADC-6.0.4 FortiADC-6.0.3 FortiADC-6.0.2 FortiADC-6.0.1 FortiADC-6.0.0 FortiADC-5.4.5 FortiADC-5.4.4 FortiADC-5.4.3 FortiADC-5.4.2 FortiADC-5.4.1 FortiADC-5.4.0 FortiADC-5.3.7 FortiADC-5.3.6 FortiADC-5.3.5 FortiADC-5.3.4 FortiADC-5.3.3 FortiADC-5.3.2 FortiADC-5.3.1 FortiADC-5.3.0 FortiADC-5.2.8 FortiADC-5.2.7 FortiADC-5.2.6 FortiADC-5.2.5 FortiADC-5.2.4 FortiADC-5.2.3 FortiADC-5.2.2 FortiADC-5.2.1 FortiADC-5.2.0 FortiADC-5.1.7 FortiADC-5.1.6 FortiADC-5.1.5 FortiADC-5.1.4 FortiADC-5.1.3 FortiADC-5.1.2 FortiADC-5.1.1 FortiADC-5.1.0 FortiADC-5.0.4 FortiADC-5.0.3 FortiADC-5.0.2 FortiADC-5.0.1 FortiADC-5.0.0 FortiAnalyzer-7.4.2 FortiAnalyzer-7.4.1 FortiAnalyzer-7.4.0 FortiAnalyzer-7.2.12 FortiAnalyzer-7.2.11 FortiAnalyzer-7.2.10 FortiAnalyzer-7.2.9 FortiAnalyzer-7.2.8 FortiAnalyzer-7.2.7 FortiAnalyzer-7.2.6 FortiAnalyzer-7.2.5 FortiAnalyzer-7.2.4 FortiAnalyzer-7.2.3 FortiAnalyzer-7.2.2 FortiAnalyzer-7.2.1 FortiAnalyzer-7.2.0 FortiAnalyzer-7.0.16 FortiAnalyzer-7.0.15 FortiAnalyzer-7.0.14 FortiAnalyzer-7.0.13 FortiAnalyzer-7.0.12 FortiAnalyzer-7.0.11 FortiAnalyzer-7.0.10 FortiAnalyzer-7.0.9 FortiAnalyzer-7.0.8 FortiAnalyzer-7.0.7 FortiAnalyzer-7.0.6 FortiAnalyzer-7.0.5 FortiAnalyzer-7.0.4 FortiAnalyzer-7.0.3 FortiAnalyzer-7.0.2 FortiAnalyzer-7.0.1 FortiAnalyzer-7.0.0 FortiAnalyzer-6.4.15 FortiAnalyzer-6.4.14 FortiAnalyzer-6.4.13 FortiAnalyzer-6.4.12 FortiAnalyzer-6.4.11 FortiAnalyzer-6.4.10 FortiAnalyzer-6.4.9 FortiAnalyzer-6.4.8 FortiAnalyzer-6.4.7 FortiAnalyzer-6.4.6 FortiAnalyzer-6.4.5 FortiAnalyzer-6.4.4 FortiAnalyzer-6.4.3 FortiAnalyzer-6.4.2 FortiAnalyzer-6.4.1 FortiAnalyzer-6.4.0 FortiAnalyzer-6.2.13 FortiAnalyzer-6.2.12 FortiAnalyzer-6.2.11 FortiAnalyzer-6.2.10 FortiAnalyzer-6.2.9 FortiAnalyzer-6.2.8 FortiAnalyzer-6.2.7 FortiAnalyzer-6.2.6 FortiAnalyzer-6.2.5 FortiAnalyzer-6.2.4 FortiAnalyzer-6.2.3 FortiAnalyzer-6.2.2 FortiAnalyzer-6.2.1 FortiAnalyzer-6.2.0 FortiAuthenticator-6.4.1 FortiAuthenticator-6.4.0 FortiAuthenticator-6.3.3 FortiAuthenticator-6.3.2 FortiAuthenticator-6.3.1 FortiAuthenticator-6.3.0 FortiAuthenticator-6.2.2 FortiAuthenticator-6.2.1 FortiAuthenticator-6.2.0 FortiAuthenticator-6.1.3 FortiAuthenticator-6.1.2 FortiAuthenticator-6.1.1 FortiAuthenticator-6.1.0 FortiAuthenticator-6.0.8 FortiAuthenticator-6.0.7 FortiAuthenticator-6.0.6 FortiAuthenticator-6.0.5 FortiAuthenticator-6.0.4 FortiAuthenticator-6.0.3 FortiAuthenticator-6.0.2 FortiAuthenticator-6.0.1 FortiAuthenticator-6.0.0 FortiAuthenticator-5.5.0 FortiAuthenticator-5.4.1 FortiAuthenticator-5.4.0 FortiAuthenticator-5.3.1 FortiAuthenticator-5.3.0 FortiAuthenticator-5.2.2 FortiAuthenticator-5.2.1 FortiAuthenticator-5.2.0 FortiAuthenticator-5.1.2 FortiAuthenticator-5.1.1 FortiAuthenticator-5.1.0 FortiDDoS-5.5.1 FortiDDoS-5.5.0 FortiDDoS-5.4.3 FortiDDoS-5.4.2 FortiDDoS-5.4.1 FortiDDoS-5.4.0 FortiDDoS-5.3.2 FortiDDoS-5.3.1 FortiDDoS-5.3.0 FortiDDoS-5.2.0 FortiDDoS-5.1.0 FortiDDoS-5.0.0 FortiDDoS-4.7.0 FortiDDoS-4.6.0 FortiDDoS-4.5.0 FortiDDoS-F-6.3.3 FortiDDoS-F-6.3.2 FortiDDoS-F-6.3.1 FortiDDoS-F-6.3.0 FortiDDoS-F-6.2.3 FortiDDoS-F-6.2.2 FortiDDoS-F-6.2.1 FortiDDoS-F-6.2.0 FortiDDoS-F-6.1.5 FortiDDoS-F-6.1.4 FortiDDoS-F-6.1.3 FortiDDoS-F-6.1.2 FortiDDoS-F-6.1.1 FortiDDoS-F-6.1.0 FortiMail-7.0.3 FortiMail-7.0.2 FortiMail-7.0.1 FortiMail-7.0.0 FortiMail-6.4.8 FortiMail-6.4.7 FortiMail-6.4.6 FortiMail-6.4.5 FortiMail-6.4.4 FortiMail-6.4.3 FortiMail-6.4.2 FortiMail-6.4.1 FortiMail-6.4.0 FortiMail-6.2.9 FortiMail-6.2.8 FortiMail-6.2.7 FortiMail-6.2.6 FortiMail-6.2.5 FortiMail-6.2.4 FortiMail-6.2.3 FortiMail-6.2.2 FortiMail-6.2.1 FortiMail-6.2.0 FortiMail-6.0.12 FortiMail-6.0.11 FortiMail-6.0.10 FortiMail-6.0.9 FortiMail-6.0.8 FortiMail-6.0.7 FortiMail-6.0.6 FortiMail-6.0.5 FortiMail-6.0.4 FortiMail-6.0.3 FortiMail-6.0.2 FortiMail-6.0.1 FortiMail-6.0.0 FortiMail-5.4.12 FortiMail-5.4.11 FortiMail-5.4.10 FortiMail-5.4.9 FortiMail-5.4.8 FortiMail-5.4.7 FortiMail-5.4.6 FortiMail-5.4.5 FortiMail-5.4.4 FortiMail-5.4.3 FortiMail-5.4.2 FortiMail-5.4.1 FortiMail-5.4.0 FortiManager-7.4.3 FortiManager-7.4.2 FortiManager-7.4.1 FortiManager-7.4.0 FortiManager-7.2.12 FortiManager-7.2.11 FortiManager-7.2.10 FortiManager-7.2.9 FortiManager-7.2.8 FortiManager-7.2.7 FortiManager-7.2.6 FortiManager-7.2.5 FortiManager-7.2.4 FortiManager-7.2.3 FortiManager-7.2.2 FortiManager-7.2.1 FortiManager-7.2.0 FortiManager-7.0.16 FortiManager-7.0.15 FortiManager-7.0.14 FortiManager-7.0.13 FortiManager-7.0.12 FortiManager-7.0.11 FortiManager-7.0.10 FortiManager-7.0.9 FortiManager-7.0.8 FortiManager-7.0.7 FortiManager-7.0.6 FortiManager-7.0.5 FortiManager-7.0.4 FortiManager-7.0.3 FortiManager-7.0.2 FortiManager-7.0.1 FortiManager-7.0.0 FortiManager-6.4.15 FortiManager-6.4.14 FortiManager-6.4.13 FortiManager-6.4.12 FortiManager-6.4.11 FortiManager-6.4.10 FortiManager-6.4.9 FortiManager-6.4.8 FortiManager-6.4.7 FortiManager-6.4.6 FortiManager-6.4.5 FortiManager-6.4.4 FortiManager-6.4.3 FortiManager-6.4.2 FortiManager-6.4.1 FortiManager-6.4.0 FortiManager-6.2.13 FortiManager-6.2.12 FortiManager-6.2.11 FortiManager-6.2.10 FortiManager-6.2.9 FortiManager-6.2.8 FortiManager-6.2.7 FortiManager-6.2.6 FortiManager-6.2.5 FortiManager-6.2.4 FortiManager-6.2.3 FortiManager-6.2.2 FortiManager-6.2.1 FortiManager-6.2.0 FortiNDR-7.2.0 FortiNDR-7.1.0 FortiNDR-7.0.7 FortiNDR-7.0.6 FortiNDR-7.0.5 FortiNDR-7.0.4 FortiNDR-7.0.3 FortiNDR-7.0.2 FortiNDR-7.0.1 FortiNDR-7.0.0 FortiNDR-1.5.3 FortiNDR-1.5.2 FortiNDR-1.5.1 FortiNDR-1.5.0 FortiNDR-1.4.0 FortiNDR-1.3.1 FortiNDR-1.3.0 FortiNDR-1.2.0 FortiNDR-1.1.0 FortiOS-7.2.4 FortiOS-7.2.3 FortiOS-7.2.2 FortiOS-7.2.1 FortiOS-7.2.0 FortiOS-7.0.19 FortiOS-7.0.18 FortiOS-7.0.17 FortiOS-7.0.16 FortiOS-7.0.15 FortiOS-7.0.14 FortiOS-7.0.13 FortiOS-7.0.12 FortiOS-7.0.11 FortiOS-7.0.10 FortiOS-7.0.9 FortiOS-7.0.8 FortiOS-7.0.7 FortiOS-7.0.6 FortiOS-7.0.5 FortiOS-7.0.4 FortiOS-7.0.3 FortiOS-7.0.2 FortiOS-7.0.1 FortiOS-7.0.0 FortiOS-6.4.16 FortiOS-6.4.15 FortiOS-6.4.14 FortiOS-6.4.13 FortiOS-6.4.12 FortiOS-6.4.11 FortiOS-6.4.10 FortiOS-6.4.9 FortiOS-6.4.8 FortiOS-6.4.7 FortiOS-6.4.6 FortiOS-6.4.5 FortiOS-6.4.4 FortiOS-6.4.3 FortiOS-6.4.2 FortiOS-6.4.1 FortiOS-6.4.0 FortiOS-6.2.17 FortiOS-6.2.16 FortiOS-6.2.15 FortiOS-6.2.14 FortiOS-6.2.13 FortiOS-6.2.12 FortiOS-6.2.11 FortiOS-6.2.10 FortiOS-6.2.9 FortiOS-6.2.8 FortiOS-6.2.7 FortiOS-6.2.6 FortiOS-6.2.5 FortiOS-6.2.4 FortiOS-6.2.3 FortiOS-6.2.2 FortiOS-6.2.1 FortiOS-6.2.0 FortiOS-6.0.18 FortiOS-6.0.17 FortiOS-6.0.16 FortiOS-6.0.15 FortiOS-6.0.14 FortiOS-6.0.13 FortiOS-6.0.12 FortiOS-6.0.11 FortiOS-6.0.10 FortiOS-6.0.9 FortiOS-6.0.8 FortiOS-6.0.7 FortiOS-6.0.6 FortiOS-6.0.5 FortiOS-6.0.4 FortiOS-6.0.3 FortiOS-6.0.2 FortiOS-6.0.1 FortiOS-6.0.0 FortiPortal-6.0.9 FortiPortal-6.0.8 FortiPortal-6.0.7 FortiPortal-6.0.6 FortiPortal-6.0.5 FortiPortal-6.0.4 FortiPortal-6.0.3 FortiPortal-6.0.2 FortiPortal-6.0.1 FortiPortal-6.0.0 FortiProxy-7.0.4 FortiProxy-7.0.3 FortiProxy-7.0.2 FortiProxy-7.0.1 FortiProxy-7.0.0 FortiProxy-2.0.14 FortiProxy-2.0.13 FortiProxy-2.0.12 FortiProxy-2.0.11 FortiProxy-2.0.10 FortiProxy-2.0.9 FortiProxy-2.0.8 FortiProxy-2.0.7 FortiProxy-2.0.6 FortiProxy-2.0.5 FortiProxy-2.0.4 FortiProxy-2.0.3 FortiProxy-2.0.2 FortiProxy-2.0.1 FortiProxy-2.0.0 FortiProxy-1.2.13 FortiProxy-1.2.12 FortiProxy-1.2.11 FortiProxy-1.2.10 FortiProxy-1.2.9 FortiProxy-1.2.8 FortiProxy-1.2.7 FortiProxy-1.2.6 FortiProxy-1.2.5 FortiProxy-1.2.4 FortiProxy-1.2.3 FortiProxy-1.2.2 FortiProxy-1.2.1 FortiProxy-1.2.0 FortiProxy-1.1.6 FortiProxy-1.1.5 FortiProxy-1.1.4 FortiProxy-1.1.3 FortiProxy-1.1.2 FortiProxy-1.1.1 FortiProxy-1.1.0 FortiProxy-1.0.7 FortiProxy-1.0.6 FortiProxy-1.0.5 FortiProxy-1.0.4 FortiProxy-1.0.3 FortiProxy-1.0.2 FortiProxy-1.0.1 FortiProxy-1.0.0 FortiRecorder-6.4.2 FortiRecorder-6.4.1 FortiRecorder-6.4.0 FortiRecorder-6.0.10 FortiRecorder-6.0.9 FortiRecorder-6.0.8 FortiRecorder-6.0.7 FortiRecorder-6.0.6 FortiRecorder-6.0.5 FortiRecorder-6.0.4 FortiRecorder-6.0.3 FortiRecorder-6.0.2 FortiRecorder-6.0.1 FortiRecorder-6.0.0 FortiRecorder-2.7.7 FortiRecorder-2.7.6 FortiRecorder-2.7.5 FortiRecorder-2.7.4 FortiRecorder-2.7.3 FortiRecorder-2.7.2 FortiRecorder-2.7.1 FortiRecorder-2.7.0 FortiRecorder-2.6.3 FortiRecorder-2.6.2 FortiRecorder-2.6.1 FortiRecorder-2.6.0 FortiSOAR on-premise-7.2.2 FortiSOAR on-premise-7.2.1 FortiSOAR on-premise-7.2.0 FortiSOAR on-premise-7.0.3 FortiSOAR on-premise-7.0.2 FortiSOAR on-premise-7.0.1 FortiSOAR on-premise-7.0.0 FortiSOAR on-premise-6.4.4 FortiSOAR on-premise-6.4.3 FortiSOAR on-premise-6.4.1 FortiSOAR on-premise-6.4.0 FortiSwitch-7.0.4 FortiSwitch-7.0.3 FortiSwitch-7.0.2 FortiSwitch-7.0.1 FortiSwitch-7.0.0 FortiSwitch-6.4.10 FortiSwitch-6.4.9 FortiSwitch-6.4.8 FortiSwitch-6.4.7 FortiSwitch-6.4.6 FortiSwitch-6.4.5 FortiSwitch-6.4.4 FortiSwitch-6.4.3 FortiSwitch-6.4.2 FortiSwitch-6.4.1 FortiSwitch-6.4.0 FortiSwitch-6.2.8 FortiSwitch-6.2.7 FortiSwitch-6.2.6 FortiSwitch-6.2.5 FortiSwitch-6.2.4 FortiSwitch-6.2.3 FortiSwitch-6.2.2 FortiSwitch-6.2.1 FortiSwitch-6.2.0 FortiSwitch-6.0.7 FortiSwitch-6.0.6 FortiSwitch-6.0.5 FortiSwitch-6.0.4 FortiSwitch-6.0.3 FortiSwitch-6.0.2 FortiSwitch-6.0.1 FortiSwitch-6.0.0 FortiTester-7.2.1 FortiTester-7.2.0 FortiTester-7.1.1 FortiTester-7.1.0 FortiTester-7.0.0 FortiTester-4.2.1 FortiTester-4.2.0 FortiTester-4.1.1 FortiTester-4.1.0 FortiTester-4.0.0 FortiTester-3.9.2 FortiTester-3.9.1 FortiTester-3.9.0 FortiTester-3.8.0 FortiTester-3.7.1 FortiTester-3.7.0 FortiTester-3.6.0 FortiTester-3.5.1 FortiTester-3.5.0 FortiTester-3.4.0 FortiTester-3.3.1 FortiTester-3.3.0 FortiVoice-7.0.1 FortiVoice-7.0.0 FortiVoice-6.4.8 FortiVoice-6.4.7 FortiVoice-6.4.6 FortiVoice-6.4.5 FortiVoice-6.4.4 FortiVoice-6.4.3 FortiVoice-6.4.2 FortiVoice-6.4.1 FortiVoice-6.4.0 FortiVoice-6.0.11 FortiVoice-6.0.10 FortiVoice-6.0.9 FortiVoice-6.0.8 FortiVoice-6.0.7 FortiVoice-6.0.6 FortiVoice-6.0.5 FortiVoice-6.0.4 FortiVoice-6.0.3 FortiVoice-6.0.2 FortiVoice-6.0.1 FortiVoice-6.0.0 FortiWLC-8.6.7 FortiWLC-8.6.6 FortiWLC-8.6.5 FortiWLC-8.6.4 FortiWLC-8.6.3 FortiWLC-8.6.2 FortiWLC-8.6.1 FortiWLC-8.6.0 FortiWLC-8.5.5 FortiWLC-8.5.4 FortiWLC-8.5.3 FortiWLC-8.5.2 FortiWLC-8.5.1 FortiWLC-8.5.0 FortiWLC-8.4.8 FortiWLC-8.4.7 FortiWLC-8.4.6 FortiWLC-8.4.5 FortiWLC-8.4.4 FortiWLC-8.4.2 FortiWLC-8.4.1 FortiWLC-8.4.0 4.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C https://fortiguard.fortinet.com/psirt/FG-IR-23-494 `Host` header injection Reference>