CVE-2023-44252

8.8 highEPSS 0.7%Unsupported when assigned

High (8.8) in fortinet fortiwan. No vendor fix: the product was unsupported when the CVE was assigned. EPSS 0.7% chance of exploitation in the next 30 days.

An improper authentication vulnerability [CWE-287] in Fortinet FortiWAN version 5.2.0 through 5.2.1 and version 5.1.1 through 5.1.2 may allow an authenticated attacker to escalate his privileges via HTTP or HTTPs requests with crafted JWT token values.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2023-12-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortiwan

References

https://fortiguard.com/psirt/FG-IR-23-061
https://fortiguard.com/psirt/FG-IR-23-061

Check your stack JSON