{"history":[{"alert":0,"cve":"CVE-2022-42475","id":22481,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.99474, \"percentile\": 0.99943}"},{"alert":0,"cve":"CVE-2022-42475","id":19940,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.99474, \"percentile\": 0.99943}"},{"alert":0,"cve":"CVE-2022-42475","id":17906,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.99474, \"percentile\": 0.99943}"},{"alert":0,"cve":"CVE-2022-42475","id":15970,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.99474, \"percentile\": 0.99943}"},{"alert":0,"cve":"CVE-2022-42475","id":13948,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.99474, \"percentile\": 0.99943}"},{"alert":0,"cve":"CVE-2022-42475","id":11730,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.99474, \"percentile\": 0.99943}"},{"alert":0,"cve":"CVE-2022-42475","id":9716,"kind":"epss","observed_at":1793938800,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.99474, \"percentile\": 0.99943}"},{"alert":1,"cve":"CVE-2022-42475","id":8237,"kind":"cna","observed_at":1793830801,"payload":"{\"containers\": {\"adp\": [{\"providerMetadata\": {\"dateUpdated\": \"2024-08-03T13:10:40.927Z\", \"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\"}, \"references\": [{\"name\": \"https://fortiguard.com/psirt/FG-IR-22-398\", \"tags\": [\"x_transferred\"], \"url\": \"https://fortiguard.com/psirt/FG-IR-22-398\"}], \"title\": \"CVE Program Container\"}, {\"metrics\": [{\"other\": {\"content\": {\"id\": \"CVE-2022-42475\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2024-10-23T13:26:56.926267Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2022-12-13\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-42475\"}, \"type\": \"kev\"}}], \"providerMetadata\": {\"dateUpdated\": \"2025-10-21T23:15:29.105Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-42475\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2022-12-13T00:00:00.000Z\", \"value\": \"CVE-2022-42475 added to CISA KEV\"}], \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"defaultStatus\": \"unaffected\", \"product\": \"FortiProxy\", \"vendor\": \"Fortinet\", \"versions\": [{\"lessThanOrEqual\": \"7.2.1\", \"status\": \"affected\", \"version\": \"7.2.0\", \"versionType\": \"semver\"}, {\"lessThanOrEqual\": \"7.0.7\", \"status\": \"affected\", \"version\": \"7.0.0\", \"versionType\": \"semver\"}, {\"lessThanOrEqual\": \"2.0.11\", \"status\": \"affected\", \"version\": \"2.0.0\", \"versionType\": \"semver\"}, {\"lessThanOrEqual\": \"1.2.13\", \"status\": \"affected\", \"version\": \"1.2.0\", \"versionType\": \"semver\"}, {\"lessThanOrEqual\": \"1.1.6\", \"status\": \"affected\", \"version\": \"1.1.0\", \"versionType\": \"semver\"}, {\"lessThanOrEqual\": \"1.0.7\", \"status\": \"affected\", \"version\": \"1.0.0\", \"versionType\": \"semver\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"FortiOS\", \"vendor\": \"Fortinet\", \"versions\": [{\"lessThanOrEqual\": \"7.2.2\", \"status\": \"affected\", \"version\": \"7.2.0\", \"versionType\": \"semver\"}, {\"lessThanOrEqual\": \"7.0.8\", \"status\": \"affected\", \"version\": \"7.0.0\", \"versionType\": \"semver\"}, {\"lessThanOrEqual\": \"6.4.10\", \"status\": \"affected\", \"version\": \"6.4.0\", \"versionType\": \"semver\"}, {\"lessThanOrEqual\": \"6.2.11\", \"status\": \"affected\", \"version\": \"6.2.0\", \"versionType\": \"semver\"}, {\"lessThanOrEqual\": \"6.0.15\", \"status\": \"affected\", \"version\": \"6.0.0\", \"versionType\": \"semver\"}, {\"lessThanOrEqual\": \"5.6.14\", \"status\": \"affected\", \"version\": \"5.6.0\", \"versionType\": \"semver\"}, {\"lessThanOrEqual\": \"5.4.13\", \"status\": \"affected\", \"version\": \"5.4.0\", \"versionType\": \"semver\"}, {\"lessThanOrEqual\": \"5.2.15\", \"status\": \"affected\", \"version\": \"5.2.0\", \"versionType\": \"semver\"}, {\"lessThanOrEqual\": \"5.0.14\", \"status\": \"affected\", \"version\": \"5.0.0\", \"versionType\": \"semver\"}]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A heap-based buffer overflow vulnerability [CWE-122]\\u00a0in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier  and FortiProxy SSL-VPN 7.2.0 through 7.2.1, 7.0.7 and earlier may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.\"}], \"metrics\": [{\"cvssV3_1\": {\"attackComplexity\": \"LOW\", \"attackVector\": \"NETWORK\", \"availabilityImpact\": \"HIGH\", \"baseScore\": 9.3, \"baseSeverity\": \"CRITICAL\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"scope\": \"UNCHANGED\", \"userInteraction\": \"NONE\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C\", \"version\": \"3.1\"}, \"format\": \"CVSS\"}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-197\", \"description\": \"Execute unauthorized code or commands\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2023-01-02T08:18:49.444Z\", \"orgId\": \"6abe59d8-c742-4dff-8ce8-9b0ca1073da8\", \"shortName\": \"fortinet\"}, \"references\": [{\"name\": \"https://fortiguard.com/psirt/FG-IR-22-398\", \"url\": \"https://fortiguard.com/psirt/FG-IR-22-398\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"Please upgrade to FortiOS version 7.2.3 or above\\r\\nPlease upgrade to FortiOS version 7.0.9 or above\\r\\nPlease upgrade to FortiOS version 6.4.11 or above\\r\\nPlease upgrade to FortiOS version 6.2.12 or above\\r\\nPlease upgrade to FortiOS version 6.0.16 or above\\r\\nPlease upgrade to upcoming FortiOS-6K7K version 7.0.8 or above\\r\\nPlease upgrade to FortiOS-6K7K version 6.4.10 or above\\r\\nPlease upgrade to FortiOS-6K7K version 6.2.12 or above\\r\\nPlease upgrade to FortiOS-6K7K version 6.0.15 or above\\r\\nPlease upgrade to FortiProxy version 7.2.2 or above\\r\\nPlease upgrade to FortiProxy version 7.0.8 or above\\r\\nPlease upgrade to upcoming FortiProxy version 2.0.12 or above\"}]}}, \"cveMetadata\": {\"assignerOrgId\": \"6abe59d8-c742-4dff-8ce8-9b0ca1073da8\", \"assignerShortName\": \"fortinet\", \"cveId\": \"CVE-2022-42475\", \"datePublished\": \"2023-01-02T08:18:49.444Z\", \"dateReserved\": \"2022-10-07T14:05:36.301Z\", \"dateUpdated\": \"2025-10-21T23:15:29.105Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.1\"}"},{"alert":0,"cve":"CVE-2022-42475","id":7264,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.99474, \"percentile\": 0.99943}"},{"alert":0,"cve":"CVE-2022-42475","id":5041,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.99474, \"percentile\": 0.99943}"},{"alert":0,"cve":"CVE-2022-42475","id":2823,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.99474, \"percentile\": 0.99943}"},{"alert":1,"cve":"CVE-2022-42475","id":904,"kind":"kev","observed_at":1793665375,"payload":"{\"cveID\": \"CVE-2022-42475\", \"cwes\": [\"CWE-197\"], \"dateAdded\": \"2022-12-13\", \"dueDate\": \"2023-01-03\", \"forensicTriage\": \"No\", \"knownRansomwareCampaignUse\": \"Known\", \"notes\": \"https://www.fortiguard.com/psirt/FG-IR-22-398;  https://nvd.nist.gov/vuln/detail/CVE-2022-42475\", \"product\": \"FortiOS\", \"requiredAction\": \"Apply updates per vendor instructions.\", \"shortDescription\": \"Multiple versions of Fortinet FortiOS SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attacker to execute arbitrary code or commands via specifically crafted requests.\", \"vendorProject\": \"Fortinet\", \"vulnerabilityName\": \"Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability\"}"}],"record":{"affected":[{"defaultStatus":"unaffected","product":"FortiProxy","vendor":"Fortinet","versions":[{"lessThanOrEqual":"7.2.1","status":"affected","version":"7.2.0","versionType":"semver"},{"lessThanOrEqual":"7.0.7","status":"affected","version":"7.0.0","versionType":"semver"},{"lessThanOrEqual":"2.0.11","status":"affected","version":"2.0.0","versionType":"semver"},{"lessThanOrEqual":"1.2.13","status":"affected","version":"1.2.0","versionType":"semver"},{"lessThanOrEqual":"1.1.6","status":"affected","version":"1.1.0","versionType":"semver"},{"lessThanOrEqual":"1.0.7","status":"affected","version":"1.0.0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"FortiOS","vendor":"Fortinet","versions":[{"lessThanOrEqual":"7.2.2","status":"affected","version":"7.2.0","versionType":"semver"},{"lessThanOrEqual":"7.0.8","status":"affected","version":"7.0.0","versionType":"semver"},{"lessThanOrEqual":"6.4.10","status":"affected","version":"6.4.0","versionType":"semver"},{"lessThanOrEqual":"6.2.11","status":"affected","version":"6.2.0","versionType":"semver"},{"lessThanOrEqual":"6.0.15","status":"affected","version":"6.0.0","versionType":"semver"},{"lessThanOrEqual":"5.6.14","status":"affected","version":"5.6.0","versionType":"semver"},{"lessThanOrEqual":"5.4.13","status":"affected","version":"5.4.0","versionType":"semver"},{"lessThanOrEqual":"5.2.15","status":"affected","version":"5.2.0","versionType":"semver"},{"lessThanOrEqual":"5.0.14","status":"affected","version":"5.0.0","versionType":"semver"}]}],"cna":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-03T13:10:40.927Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"https://fortiguard.com/psirt/FG-IR-22-398","tags":["x_transferred"],"url":"https://fortiguard.com/psirt/FG-IR-22-398"}],"title":"CVE Program Container"},{"metrics":[{"other":{"content":{"id":"CVE-2022-42475","options":[{"Exploitation":"active"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2024-10-23T13:26:56.926267Z","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2022-12-13","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-42475"},"type":"kev"}}],"providerMetadata":{"dateUpdated":"2025-10-21T23:15:29.105Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-42475"}],"timeline":[{"lang":"en","time":"2022-12-13T00:00:00.000Z","value":"CVE-2022-42475 added to CISA KEV"}],"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"defaultStatus":"unaffected","product":"FortiProxy","vendor":"Fortinet","versions":[{"lessThanOrEqual":"7.2.1","status":"affected","version":"7.2.0","versionType":"semver"},{"lessThanOrEqual":"7.0.7","status":"affected","version":"7.0.0","versionType":"semver"},{"lessThanOrEqual":"2.0.11","status":"affected","version":"2.0.0","versionType":"semver"},{"lessThanOrEqual":"1.2.13","status":"affected","version":"1.2.0","versionType":"semver"},{"lessThanOrEqual":"1.1.6","status":"affected","version":"1.1.0","versionType":"semver"},{"lessThanOrEqual":"1.0.7","status":"affected","version":"1.0.0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"FortiOS","vendor":"Fortinet","versions":[{"lessThanOrEqual":"7.2.2","status":"affected","version":"7.2.0","versionType":"semver"},{"lessThanOrEqual":"7.0.8","status":"affected","version":"7.0.0","versionType":"semver"},{"lessThanOrEqual":"6.4.10","status":"affected","version":"6.4.0","versionType":"semver"},{"lessThanOrEqual":"6.2.11","status":"affected","version":"6.2.0","versionType":"semver"},{"lessThanOrEqual":"6.0.15","status":"affected","version":"6.0.0","versionType":"semver"},{"lessThanOrEqual":"5.6.14","status":"affected","version":"5.6.0","versionType":"semver"},{"lessThanOrEqual":"5.4.13","status":"affected","version":"5.4.0","versionType":"semver"},{"lessThanOrEqual":"5.2.15","status":"affected","version":"5.2.0","versionType":"semver"},{"lessThanOrEqual":"5.0.14","status":"affected","version":"5.0.0","versionType":"semver"}]}],"descriptions":[{"lang":"en","value":"A heap-based buffer overflow vulnerability [CWE-122]\u00a0in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier  and FortiProxy SSL-VPN 7.2.0 through 7.2.1, 7.0.7 and earlier may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests."}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.3,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-197","description":"Execute unauthorized code or commands","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2023-01-02T08:18:49.444Z","orgId":"6abe59d8-c742-4dff-8ce8-9b0ca1073da8","shortName":"fortinet"},"references":[{"name":"https://fortiguard.com/psirt/FG-IR-22-398","url":"https://fortiguard.com/psirt/FG-IR-22-398"}],"solutions":[{"lang":"en","value":"Please upgrade to FortiOS version 7.2.3 or above\r\nPlease upgrade to FortiOS version 7.0.9 or above\r\nPlease upgrade to FortiOS version 6.4.11 or above\r\nPlease upgrade to FortiOS version 6.2.12 or above\r\nPlease upgrade to FortiOS version 6.0.16 or above\r\nPlease upgrade to upcoming FortiOS-6K7K version 7.0.8 or above\r\nPlease upgrade to FortiOS-6K7K version 6.4.10 or above\r\nPlease upgrade to FortiOS-6K7K version 6.2.12 or above\r\nPlease upgrade to FortiOS-6K7K version 6.0.15 or above\r\nPlease upgrade to FortiProxy version 7.2.2 or above\r\nPlease upgrade to FortiProxy version 7.0.8 or above\r\nPlease upgrade to upcoming FortiProxy version 2.0.12 or above"}]}},"cveMetadata":{"assignerOrgId":"6abe59d8-c742-4dff-8ce8-9b0ca1073da8","assignerShortName":"fortinet","cveId":"CVE-2022-42475","datePublished":"2023-01-02T08:18:49.444Z","dateReserved":"2022-10-07T14:05:36.301Z","dateUpdated":"2025-10-21T23:15:29.105Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"cna_checked":1794262800,"cve":"CVE-2022-42475","description":"A heap-based buffer overflow vulnerability [CWE-122]\u00a0in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier  and FortiProxy SSL-VPN 7.2.0 through 7.2.1, 7.0.7 and earlier may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.","epss":{"date":"2026-11-12","epss":0.99474,"percentile":0.99943},"epss_checked":1794522003,"first_seen":1793665375,"kev":{"cveID":"CVE-2022-42475","cwes":["CWE-197"],"dateAdded":"2022-12-13","dueDate":"2023-01-03","forensicTriage":"No","knownRansomwareCampaignUse":"Known","notes":"https://www.fortiguard.com/psirt/FG-IR-22-398;  https://nvd.nist.gov/vuln/detail/CVE-2022-42475","product":"FortiOS","requiredAction":"Apply updates per vendor instructions.","shortDescription":"Multiple versions of Fortinet FortiOS SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attacker to execute arbitrary code or commands via specifically crafted requests.","vendorProject":"Fortinet","vulnerabilityName":"Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability"},"kev_checked":1794522003,"products":"Fortinet FortiProxy, Fortinet FortiOS","references":["https://fortiguard.com/psirt/FG-IR-22-398","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-42475"],"score":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.3,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","provider":"fortinet","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C","version":"3.1"},"solutions":"Please upgrade to FortiOS version 7.2.3 or above\r\nPlease upgrade to FortiOS version 7.0.9 or above\r\nPlease upgrade to FortiOS version 6.4.11 or above\r\nPlease upgrade to FortiOS version 6.2.12 or above\r\nPlease upgrade to FortiOS version 6.0.16 or above\r\nPlease upgrade to upcoming FortiOS-6K7K version 7.0.8 or above\r\nPlease upgrade to FortiOS-6K7K version 6.4.10 or above\r\nPlease upgrade to FortiOS-6K7K version 6.2.12 or above\r\nPlease upgrade to FortiOS-6K7K version 6.0.15 or above\r\nPlease upgrade to FortiProxy version 7.2.2 or above\r\nPlease upgrade to FortiProxy version 7.0.8 or above\r\nPlease upgrade to upcoming FortiProxy version 2.0.12 or above","state":"PUBLISHED","title":"Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability","updated_at":1794500401,"workarounds":""},"sources":[]}