CVE-2018-13383

CWE-787

High

70.1

RPS

Description

A heap buffer overflow in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.10, 5.4.0 through 5.4.12, 5.2.14 and earlier and FortiProxy 2.0.0, 1.2.8 and earlier in the SSL VPN web portal may cause the SSL VPN web service termination for logged in users due to a failure to properly handle javascript href data when proxying webpages.

Source: NVD

CVSS: 4.3; Medium · v3.1
EPSS: 33.64%; Probability of exploitation in the next 30 days (FIRST)
CISA KEV: In CISA KEV since Jan 2022
Fix commit: No known fix commit; Sources: MoreFixes, FreshFixes
Weakness: CWE-787
Published: 29 May 2019; Last modified 24 Oct 2025

How to read these signals: RPS · EPSS · CISA KEV · Data sources

Get this score from the API

curl -H "Authorization: Bearer dsec_live_xxxxxxxx" \
  https://api.intelligence.devsecure.io/api/v1/rps/CVE-2018-13383

Replace the placeholder with your key. Get a free API key or rank your own CVEs.

Data as of 8 Oct 2026, 05:16 UK time

CVE-2018-13383

Description

Signals

Get this score from the API