CVE-2021-22128

—

CVSS 3.1

4.3 medium

EPSS

1%p61

Published

Mar 4, 2021 (Mar 4, 2021)

Modified

Jun 17, 2026

Description

An improper access control vulnerability in FortiProxy SSL VPN portal 2.0.0, 1.2.9 and below versions may allow an authenticated, remote attacker to access internal service such as the ZebOS Shell on the FortiProxy appliance through the Quick Connection functionality.

Vendors: fortinet
Products: fortiproxy
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.