onyx

onyx --cves cve-2018-13382

CVE-2018-13382

score
<0.1
cvss
—
epss
81.7%
published
—
kev added
2022-01-10
first seen

An Improper Authorization vulnerability in Fortinet FortiOS and FortiProxy under SSL VPN web portal allows an unauthenticated attacker to modify the password.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2022-01-10 — Added to CISA KEVK2026-10-21 (seen by) — Tracked by OnyxTscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 81.7%2026-09-23: epss 81.7%2026-09-24: epss 81.7%2026-09-25: epss 81.7%2026-09-26: epss 81.7%2026-09-27: epss 81.7%2026-09-28: epss 81.7%2026-09-29: epss 81.7%2026-09-30: epss 81.7%2026-10-01: epss 81.7%2026-10-02: epss 81.7%2026-10-03: epss 81.7%2026-10-04: epss 81.7%2026-10-05: epss 81.7%2026-10-06: epss 81.7%2026-10-07: epss 81.7%2026-10-08: epss 81.7%2026-10-09: epss 81.7%2026-10-10: epss 81.7%2026-10-11: epss 81.7%2026-10-12: epss 81.7%2026-10-13: epss 81.7%2026-10-14: epss 81.7%2026-10-15: epss 81.7%2026-10-16: epss 81.7%2026-10-18: epss 81.7%2026-10-19: epss 81.7%2026-10-20: epss 81.7%2026-10-21: epss 81.7%81.7%mentions/day0no mentions in 30 days2026-09-22today
  1. Added to CISA KEV
  2. Tracked by Onyx

Weaknesses

CWE-285

References 1