CVE-2023-27998

5.3 mediumEPSS 0.5%

Medium (5.3) in fortinet fortipresence. EPSS 0.5% chance of exploitation in the next 30 days.

A lack of custom error pages vulnerability [CWE-756] in FortiPresence versions 1.2.0 through 1.2.1 and all versions of 1.1 and 1.0 may allow an unauthenticated attacker with the ability to navigate to the login GUI to gain sensitive information via navigating to specific HTTP(s) paths.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-10-31)
CWEs: CWE-755, CWE-756
Published: 2023-09-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortipresence

References

https://fortiguard.com/psirt/FG-IR-22-288
https://fortiguard.com/psirt/FG-IR-22-288

Check your stack JSON