What’s Vulnerable › Vulnerabilities
CVE-2021-22128
- Severity: medium (CVSS 4.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.0% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2021-03-04 · updated 2026-06-17
Description
An improper access control vulnerability in FortiProxy SSL VPN portal 2.0.0, 1.2.9 and below versions may allow an authenticated, remote attacker to access internal service such as the ZebOS Shell on the FortiProxy appliance through the Quick Connection functionality.
Affected products
- Fortinet FortiProxy: through 1.2.9; 2.0.0
References
Get alerted when CVE-2021-22128 or the next vulnerability affects your stack