Fortinet Fortiweb (Fortinet) - vulnerabilities (CVEs)
27 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2022-04-06. Vendor: Fortinet.
CVEs of Fortinet Fortiweb
- CVE-2021-41026 - CVSS 6.5 (medium), 2022-04-06: A relative path traversal in FortiWeb versions 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow an authenticated attacker to retrieve arbitrary files from the…
- CVE-2021-43071 - CVSS 8.8 (high), 2021-12-09: A heap-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below, version 6.2.6 and below allows attacker to execute…
- CVE-2021-36194 - CVSS 8.8 (high), 2021-12-09: Multiple stack-based buffer overflows in the API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow an authenticated attacker to achieve…
- CVE-2021-41017 - CVSS 8.8 (high), 2021-12-08: Multiple heap-based buffer overflow vulnerabilities in some web API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow a remote…
- CVE-2021-36195 - CVSS 8.8 (high), 2021-12-08: Multiple command injection vulnerabilities in the command line interpreter of FortiWeb versions 6.4.1, 6.4.0, 6.3.0 through 6.3.15, 6.2.0 through 6.2.6, and…
- CVE-2021-41025 - CVSS 9.8 (critical), 2021-12-08: Multiple vulnerabilities in the authentication mechanism of confd in FortiWeb versions 6.4.1, 6.4.0, 6.3.0 through 6.3.15, 6.2.0 through 6.2.6, 6.1.0 through…
- CVE-2021-36188 - CVSS 6.1 (medium), 2021-12-08: A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows…
- CVE-2021-41013 - CVSS 5.3 (medium), 2021-12-08: An improper access control vulnerability [CWE-284] in FortiWeb versions 6.4.1 and below and 6.3.15 and below in the Report Browse section of Log & Report may…
- CVE-2021-43063 - CVSS 6.1 (medium), 2021-12-08: A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below,…
- CVE-2021-36190 - CVSS 6.3 (medium), 2021-12-08: A unintended proxy or intermediary ('confused deputy') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows an unauthenticated attacker to…
- CVE-2021-41027 - CVSS 7.8 (high), 2021-12-08: A stack-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, allows an authenticated attacker to execute unauthorized code or commands via…
- CVE-2021-43064 - CVSS 6.1 (medium), 2021-12-08: A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below, version 6.2.6 and below allows…
- CVE-2021-36191 - CVSS 5.4 (medium), 2021-12-08: A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows attacker to use the device as…
- CVE-2021-41015 - CVSS 6.1 (medium), 2021-12-08: A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows…
- CVE-2021-41014 - CVSS 7.5 (high), 2021-12-08: A uncontrolled resource consumption in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows an unauthenticated attacker to make the httpsd…
- CVE-2021-36180 - CVSS 8.8 (high), 2021-12-08: Multiple improper neutralization of special elements used in a command vulnerabilities [CWE-77] in FortiWeb management interface 6.4.1 and below, 6.3.15 and…
- CVE-2021-36187 - CVSS 7.5 (high), 2021-11-02: A uncontrolled resource consumption in Fortinet FortiWeb version 6.4.0, version 6.3.15 and below, 6.2.5 and below allows attacker to cause a denial of service…
- CVE-2021-36186 - CVSS 9.8 (critical), 2021-11-02: A stack-based buffer overflow in Fortinet FortiWeb version 6.4.0, version 6.3.15 and below, 6.2.5 and below allows attacker to execute unauthorized code or…
- CVE-2021-36182 - CVSS 8.8 (high), 2021-09-08: A Improper neutralization of special elements used in a command ('Command Injection') in Fortinet FortiWeb version 6.3.13 and below allows attacker to execute…
- CVE-2021-36179 - CVSS 8.8 (high), 2021-09-08: A stack-based buffer overflow in Fortinet FortiWeb version 6.3.14 and below, 6.2.4 and below allows attacker to execute unauthorized code or commands via…
- CVE-2021-22123 - CVSS 8.8 (high), 2021-06-01: An OS command injection vulnerability in FortiWeb's management interface 6.3.7 and below, 6.2.3 and below, 6.1.x, 6.0.x, 5.9.x may allow a remote…
- CVE-2020-15942 - CVSS 6.5 (medium), 2021-04-12: An information disclosure vulnerability in Web Vulnerability Scan profile of Fortinet's FortiWeb version 6.2.x below 6.2.4 and version 6.3.x below 6.3.5 may…
- CVE-2021-22122 - CVSS 6.1 (medium), 2021-02-08: An improper neutralization of input during web page generation in FortiWeb GUI interface 6.3.0 through 6.3.7 and version before 6.2.4 may allow an…
- CVE-2020-29018 - CVSS 8.8 (high), 2021-01-14: A format string vulnerability in FortiWeb 6.3.0 through 6.3.5 may allow an authenticated, remote attacker to read the content of memory and retrieve sensitive…
- CVE-2020-29016 - CVSS 9.8 (critical), 2021-01-14: A stack-based buffer overflow vulnerability in FortiWeb 6.3.0 through 6.3.5 and version before 6.2.4 may allow an unauthenticated, remote attacker to…
- CVE-2019-16157 - CVSS 6.5 (medium), 2020-03-13: An information exposure vulnerability in Fortinet FortiWeb 6.2.0 CLI and earlier may allow an authenticated user to view sensitive information being logged…
- CVE-2019-16156 - CVSS 6.1 (medium), 2020-03-12: An Improper Neutralization of Input vulnerability in the Anomaly Detection Parameter Name in Fortinet FortiWeb 6.0.5, 6.2.0, and 6.1.1 may allow a remote…
