CVE-2022-23439

score

<0.1

cvss

4.7

epss

0.4%

published

2025-01-22

kev added

—

first seen

2026-10-21

Multiple Fortinet products including FortiManager, FortiMail, FortiAnalyzer, FortiVoice, FortiProxy, FortiRecorder, FortiAuthenticator, FortiNDR, FortiWLC, FortiPortal, FortiOS, FortiADC, FortiDDoS, FortiDDoS-F, FortiTester, FortiSOAR, and FortiSwitch contain a resource reference issue caused by externally controlled 'Host' headers in crafted HTTP requests, letting attackers poison web caches, exploit requires sending malicious HTTP requests with arbitrary 'Host' headers.