Unscored severity · published Aug 11, 2015
CVE-2015-5965
The SSL-VPN feature in Fortinet FortiOS before 4.3.13 only checks the first byte of the TLS MAC in finished messages, which makes it easier for remote attackers to spoof encrypted…
–
CVSS
2.1%
EPSS
No
On KEV
Description
The SSL-VPN feature in Fortinet FortiOS before 4.3.13 only checks the first byte of the TLS MAC in finished messages, which makes it easier for remote attackers to spoof encrypted content via a crafted MAC field.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FO
FortiOS · Fortinet
through 4.3.12 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-5965
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-5965
Vendor Advisory
http://www.fortiguard.com/advisory/FG-IR-15-016/
www.securityfocus.com
http://www.securityfocus.com/bid/76065
www.securitytracker.com
http://www.securitytracker.com/id/1033256
security.gentoo.org
https://security.gentoo.org/glsa/201508-01
vivaldi.net
https://vivaldi.net/en-US/blogs/entry/the-poodle-has-friends
More from FortiOS
9.8
CVE-2026-24858
Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
9.8
CVE-2025-25249
Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
9.8
CVE-2025-59718
Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability
9.8
CVE-2024-55591
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
9.8
CVE-2024-23113
Fortinet Multiple Products Format String Vulnerability