Fortiweb (Fortinet) - vulnerabilities (CVEs)

126 CVEs, 0 in the last 30 days, 162 known versions, newest CVE from 2026-08-12. Vendor: Fortinet.

CVEs of Fortiweb

• CVE-2026-26035 - CVSS 9.8 (critical), 2026-08-12: An Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0…
• CVE-2026-70466 - CVSS 5.3 (medium), 2026-08-12: A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4 all versions,…
• CVE-2026-40688 - CVSS 7.2 (high), 2026-04-14: An out-of-bounds write vulnerability [CWE-787] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through…
• CVE-2026-39811 - CVSS 4.9 (medium), 2026-04-14: A integer overflow or wraparound vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4 all versions, FortiWeb 7.2…
• CVE-2026-39814 - CVSS 6.7 (medium), 2026-04-14: A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.1 through 7.4.12, FortiWeb 7.2.7…
• CVE-2026-30897 - CVSS 6.6 (medium), 2026-03-10: A stack-based buffer overflow vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, FortiWeb…
• CVE-2026-24640 - CVSS 6.6 (medium), 2026-03-10: A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4 all…
• CVE-2026-24641 - CVSS 6.5 (medium), 2026-03-10: A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4 all…
• CVE-2026-24017 - CVSS 8.1 (high), 2026-03-10: An Improper Control of Interaction Frequency vulnerability [CWE-799] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5,…
• CVE-2025-66178 - CVSS 7.2 (high), 2026-03-10: A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb…
• CVE-2025-48840 - CVSS 5.3 (medium), 2026-03-10: An authentication bypass by spoofing vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through 7.4.8, FortiWeb 7.2 all versions, FortiWeb…
• CVE-2026-24858 - CVSS 9.8 (critical), 2026-01-27: An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer…
• CVE-2025-64471 - CVSS 7.5 (high), 2025-12-09: A use of password hash instead of password for authentication vulnerability [CWE-836] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0…
• CVE-2025-64447 - CVSS 8.1 (high), 2025-12-09: A reliance on cookies without validation and integrity checking vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.5, FortiWeb…
• CVE-2025-59719 - CVSS 9.8 (critical), 2025-12-09: An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9 may…
• CVE-2025-59669 - CVSS 5.5 (medium), 2025-11-18: A use of hard-coded credentials vulnerability in Fortinet FortiWeb 7.6.0, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may…
• CVE-2025-58034 - CVSS 7.2 (high), 2025-11-18: An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortinet FortiWeb 8.0.0…
• CVE-2025-64446 - CVSS 9.8 (critical), 2025-11-14: A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9, FortiWeb 7.2.0…
• CVE-2024-47569 - CVSS 4.3 (medium), 2025-10-14: A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, FortiMail 7.0 all…
• CVE-2025-53609 - CVSS 4.9 (medium), 2025-09-09: A Relative Path Traversal vulnerability [CWE-23] in FortiWeb 7.6.0 through 7.6.4, 7.4.0 through 7.4.8, 7.2.0 through 7.2.11, 7.0.2 through 7.0.11 may allow an…
• CVE-2025-52970 - CVSS 8.1 (high), 2025-08-12: A improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below, versions 7.4.7 and below, versions 7.2.10 and below, and 7.0.10 and below may…
• CVE-2025-47857 - CVSS 6.7 (medium), 2025-08-12: A improper neutralization of special elements used in an os command ('os command injection') vulnerability [CWE-78] in Fortinet FortiWeb CLI version 7.6.0…
• CVE-2025-32766 - CVSS 6.7 (medium), 2025-08-12: A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiWeb CLI version 7.6.0 through 7.6.3 and before 7.4.8 allows a privileged attacker to…
• CVE-2025-27759 - CVSS 6.7 (medium), 2025-08-12: An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiWeb version 7.6.0…
• CVE-2025-25257 - CVSS 9.8 (critical), 2025-07-17: An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiWeb 7.6.0…
• CVE-2025-22254 - CVSS 7.2 (high), 2025-06-10: An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, FortiOS 7.4.0 through 7.4.6, FortiOS 7.2.0…
• CVE-2025-25254 - CVSS 7.2 (high), 2025-04-08: An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in FortiWeb version 7.6.2 and below, version 7.4.6…
• CVE-2024-50565 - CVSS 7.5 (high), 2025-04-08: A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS version 7.4.0 through 7.4.3, 7.2.0 through…
• CVE-2024-46671 - CVSS 7.2 (high), 2025-04-08: An Incorrect User Management vulnerability [CWE-286] in FortiWeb version 7.6.2 and below, version 7.4.6 and below, version 7.2.10 and below, version 7.0.11…
• CVE-2024-26013 - CVSS 7.5 (high), 2025-04-08: A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS version 7.4.0 through 7.4.4, 7.2.0 through…
• CVE-2023-25610 - CVSS 9.8 (critical), 2025-03-24: A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through…
• CVE-2024-55594 - CVSS 9.8 (critical), 2025-03-14: An improper handling of syntactically invalid structure in Fortinet FortiWeb at least vesrions 7.4.0 through 7.4.6 and 7.2.0 through 7.2.10 and 7.0.0 through…
• CVE-2022-29059 - CVSS 7.2 (high), 2025-03-14: An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] in FortiWeb version 7.0.1 and below, 6.4.2 and…
• CVE-2024-55597 - CVSS 7.2 (high), 2025-03-11: A improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiWeb versions 7.0.0 through 7.6.0 allows attacker to execute…
• CVE-2024-45324 - CVSS 7.2 (high), 2025-03-11: A use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.0 through 7.4.4, version 7.2.0 through 7.2.9, version 7.0.0…
• CVE-2023-42784 - CVSS 9.8 (critical), 2025-03-11: An improper handling of syntactically invalid structure in Fortinet FortiWeb at least verions 7.4.0 through 7.4.6 and 7.2.0 through 7.2.10 and 7.0.0 through…
• CVE-2024-50569 - CVSS 7.2 (high), 2025-02-11: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb 7.0.0 through 7.6.0 allows attacker to…
• CVE-2024-50567 - CVSS 7.2 (high), 2025-02-11: An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb 7.4.0 through 7.6.0 allows attacker to…
• CVE-2024-48885 - CVSS 9.1 (critical), 2025-01-16: A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiRecorder 7.2.0 through 7.2.1, FortiRecorder…
• CVE-2024-55593 - CVSS 2.7 (low), 2025-01-14: A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWeb versions 6.3.17 through 7.6.1 allows attacker to…
• CVE-2024-48884 - CVSS 9.1 (critical), 2025-01-14: A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager 7.6.0 through 7.6.1, FortiManager…
• CVE-2024-21758 - CVSS 6.7 (medium), 2025-01-14: A stack-based buffer overflow in Fortinet FortiWeb versions 7.2.0 through 7.2.7, and 7.4.0 through 7.4.1 may allow a privileged user to execute arbitrary code…
• CVE-2024-36509 - CVSS 4.4 (medium), 2024-11-12: An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiWeb version 7.6.0, version 7.4.3 and below,…
• CVE-2024-33509 - CVSS 4.8 (medium), 2024-07-09: An improper certificate validation vulnerability [CWE-295] in FortiWeb 7.2.0 through 7.2.1, 7.0 all versions, 6.4 all versions and 6.3 all versions may allow…
• CVE-2024-23665 - CVSS 8.8 (high), 2024-06-03: Multiple improper authorization vulnerabilities [CWE-285] in FortiWeb version 7.4.2 and below, version 7.2.7 and below, version 7.0.10 and below, version…
• CVE-2024-23107 - CVSS 5.5 (medium), 2024-06-03: An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiWeb version 7.4.0, version 7.2.4 and below, version 7.0.8 and…
• CVE-2023-46713 - CVSS 5.3 (medium), 2023-12-13: An improper output neutralization for logs in Fortinet FortiWeb 6.2.0 - 6.2.8, 6.3.0 - 6.3.23, 7.0.0 - 7.0.9, 7.2.0 - 7.2.5 and 7.4.0 may allow an attacker to…
• CVE-2023-34984 - CVSS 8.8 (high), 2023-09-13: A protection mechanism failure in Fortinet FortiWeb 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4.0 through 6.4.3, 6.3.6 through 6.3.23 allows attacker to…
• CVE-2023-23777 - CVSS 7.2 (high), 2023-07-11: An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in FortiWeb version 7.0.1 and below, 6.4…
• CVE-2023-33305 - CVSS 6.5 (medium), 2023-06-13: A loop with unreachable exit condition ('infinite loop') in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS version 7.0.0 through 7.0.10, FortiOS 6.4…
• CVE-2022-43955 - CVSS 8.8 (high), 2023-04-11: An improper neutralization of input during web page generation [CWE-79] in the FortiWeb web interface 7.0.0 through 7.0.3, 6.3.0 through 6.3.21, 6.4 all…
• CVE-2022-43948 - CVSS 7.8 (high), 2023-04-11: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb version 7.0.0 through 7.0.3, FortiADC…
• CVE-2022-39951 - CVSS 8.8 (high), 2023-03-07: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb version 7.0.0 through 7.0.2, FortiWeb…
• CVE-2022-22297 - CVSS 5.5 (medium), 2023-03-07: An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiWeb version 6.4.0 through…
• CVE-2023-22636 - CVSS 7 (high), 2023-02-27: An unauthorized configuration download vulnerability in FortiWeb 6.3.6 through 6.3.21, 6.4.0 through 6.4.2 and 7.0.0 through 7.0.4 may allow a local attacker…
• CVE-2023-25602 - CVSS 7.8 (high), 2023-02-16: A stack-based buffer overflow in Fortinet FortiWeb 6.4 all versions, FortiWeb versions 6.3.17 and earlier, FortiWeb versions 6.2.6 and earlier, FortiWeb…
• CVE-2023-23778 - CVSS 6.5 (medium), 2023-02-16: A relative path traversal vulnerability [CWE-23] in FortiWeb version 7.0.1 and below, 6.4 all versions, 6.3 all versions, 6.2 all versions may allow an…
• CVE-2023-23781 - CVSS 8.8 (high), 2023-02-16: A stack-based buffer overflow vulnerability [CWE-121] in FortiWeb version 7.0.1 and below, 6.4 all versions, version 6.3.19 and below SAML server…
• CVE-2023-23784 - CVSS 6.5 (medium), 2023-02-16: A relative path traversal in Fortinet FortiWeb version 7.0.0 through 7.0.2, FortiWeb version 6.3.6 through 6.3.20, FortiWeb 6.4 all versions allows attacker…
• CVE-2023-23780 - CVSS 8.8 (high), 2023-02-16: A stack-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, Fortinet FortiWeb version 6.3.6 through 6.3.19, Fortinet FortiWeb 6.4 all…
• CVE-2023-23783 - CVSS 7.8 (high), 2023-02-16: A use of externally-controlled format string in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb 6.4 all versions allows attacker to execute…
• CVE-2023-23779 - CVSS 8.8 (high), 2023-02-16: Multiple improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78] in FortiWeb version 7.0.1 and…
• CVE-2023-23782 - CVSS 7.8 (high), 2023-02-16: A heap-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb version 6.3.0 through 6.3.19, FortiWeb 6.4 all versions, FortiWeb 6.2…
• CVE-2022-40683 - CVSS 7.8 (high), 2023-02-16: A double free in Fortinet FortiWeb version 7.0.0 through 7.0.3 may allows attacker to execute unauthorized code or commands via specially crafted commands
• CVE-2022-30299 - CVSS 5.3 (medium), 2023-02-16: A path traversal vulnerability [CWE-23] in the API of FortiWeb 7.0.0 through 7.0.1, 6.3.0 through 6.3.19, 6.4 all versions, 6.2 all versions, 6.1 all…
• CVE-2022-30306 - CVSS 8.8 (high), 2023-02-16: A stack-based buffer overflow vulnerability [CWE-121] in the CA sign functionality of FortiWeb version 7.0.1 and below, 6.4 all versions, version 6.3.19 and…
• CVE-2022-30303 - CVSS 8.8 (high), 2023-02-16: An improper neutralization of special elements used in an os command ('OS Command Injection') [CWE-78] in FortiWeb 7.0.0 through 7.0.1, 6.3.0 through 6.3.19,…
• CVE-2022-30300 - CVSS 6.5 (medium), 2023-02-16: A relative path traversal vulnerability [CWE-23] in FortiWeb 7.0.0 through 7.0.1, 6.3.6 through 6.3.18, 6.4 all versions may allow an authenticated attacker…
• CVE-2022-33871 - CVSS 7.2 (high), 2023-02-16: A stack-based buffer overflow vulnerability [CWE-121] in FortiWeb version 7.0.1 and earlier, 6.4 all versions, version 6.3.19 and earlier may allow a…
• CVE-2021-42756 - CVSS 9.8 (critical), 2023-02-16: Multiple stack-based buffer overflow vulnerabilities [CWE-121] in the proxy daemon of FortiWeb 5.x all versions, 6.0.7 and below, 6.1.2 and below, 6.2.6 and…
• CVE-2021-43074 - CVSS 4.3 (medium), 2023-02-16: An improper verification of cryptographic signature vulnerability [CWE-347] in FortiWeb 6.4 all versions, 6.3.16 and below, 6.2 all versions, 6.1 all…
• CVE-2021-42761 - CVSS 9.8 (critical), 2023-02-16: A condition for session fixation vulnerability [CWE-384] in the session management of FortiWeb versions 6.4 all versions, 6.3.0 through 6.3.16, 6.2.0 through…
• CVE-2022-42471 - CVSS 5.4 (medium), 2023-01-03: An improper neutralization of CRLF sequences in HTTP headers ('HTTP Response Splitting') vulnerability [CWE-113] In FortiWeb version 7.0.0 through 7.0.2,…
• CVE-2021-41026 - CVSS 6.5 (medium), 2022-04-06: A relative path traversal in FortiWeb versions 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow an authenticated attacker to retrieve arbitrary files from the…
• CVE-2021-41018 - CVSS 8.8 (high), 2022-02-02: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below…
• CVE-2021-36193 - CVSS 7.2 (high), 2022-02-02: Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an authenticated attacker to achieve arbitrary code…
• CVE-2021-43073 - CVSS 8.8 (high), 2022-02-02: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and…
• CVE-2021-42753 - CVSS 8.1 (high), 2022-02-02: An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in FortiWeb management interface 6.4.1 and below,…
• CVE-2021-43071 - CVSS 8.8 (high), 2021-12-09: A heap-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below, version 6.2.6 and below allows attacker to execute…
• CVE-2021-36194 - CVSS 8.8 (high), 2021-12-09: Multiple stack-based buffer overflows in the API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow an authenticated attacker to achieve…
• CVE-2021-36195 - CVSS 8.8 (high), 2021-12-08: Multiple command injection vulnerabilities in the command line interpreter of FortiWeb versions 6.4.1, 6.4.0, 6.3.0 through 6.3.15, 6.2.0 through 6.2.6, and…
• CVE-2021-41025 - CVSS 9.8 (critical), 2021-12-08: Multiple vulnerabilities in the authentication mechanism of confd in FortiWeb versions 6.4.1, 6.4.0, 6.3.0 through 6.3.15, 6.2.0 through 6.2.6, 6.1.0 through…
• CVE-2021-41017 - CVSS 8.8 (high), 2021-12-08: Multiple heap-based buffer overflow vulnerabilities in some web API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow a remote…
• CVE-2021-41013 - CVSS 5.3 (medium), 2021-12-08: An improper access control vulnerability [CWE-284] in FortiWeb versions 6.4.1 and below and 6.3.15 and below in the Report Browse section of Log & Report may…
• CVE-2021-36188 - CVSS 6.1 (medium), 2021-12-08: A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows…
• CVE-2021-43063 - CVSS 6.1 (medium), 2021-12-08: A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below,…
• CVE-2021-36190 - CVSS 6.3 (medium), 2021-12-08: A unintended proxy or intermediary ('confused deputy') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows an unauthenticated attacker to…
• CVE-2021-41027 - CVSS 7.8 (high), 2021-12-08: A stack-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, allows an authenticated attacker to execute unauthorized code or commands via…
• CVE-2021-43064 - CVSS 6.1 (medium), 2021-12-08: A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below, version 6.2.6 and below allows…
• CVE-2021-41015 - CVSS 6.1 (medium), 2021-12-08: A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows…
• CVE-2021-41014 - CVSS 7.5 (high), 2021-12-08: A uncontrolled resource consumption in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows an unauthenticated attacker to make the httpsd…
• CVE-2021-36191 - CVSS 5.4 (medium), 2021-12-08: A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows attacker to use the device as…
• CVE-2021-32591 - CVSS 5.3 (medium), 2021-12-08: A missing cryptographic steps vulnerability in the function that encrypts users' LDAP and RADIUS credentials in FortiSandbox before 4.0.1, FortiWeb before…
• CVE-2021-36180 - CVSS 8.8 (high), 2021-12-08: Multiple improper neutralization of special elements used in a command vulnerabilities [CWE-77] in FortiWeb management interface 6.4.1 and below, 6.3.15 and…
• CVE-2021-42757 - CVSS 6.7 (medium), 2021-12-08: A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authenticated local attacker to…
• CVE-2021-36187 - CVSS 7.5 (high), 2021-11-02: A uncontrolled resource consumption in Fortinet FortiWeb version 6.4.0, version 6.3.15 and below, 6.2.5 and below allows attacker to cause a denial of service…
• CVE-2021-36186 - CVSS 9.8 (critical), 2021-11-02: A stack-based buffer overflow in Fortinet FortiWeb version 6.4.0, version 6.3.15 and below, 6.2.5 and below allows attacker to execute unauthorized code or…
• CVE-2021-36175 - CVSS 5.4 (medium), 2021-10-06: An improper neutralization of input vulnerability [CWE-79] in FortiWebManager versions 6.2.3 and below, 6.0.2 and below may allow a remote authenticated…
• CVE-2021-36179 - CVSS 8.8 (high), 2021-09-08: A stack-based buffer overflow in Fortinet FortiWeb version 6.3.14 and below, 6.2.4 and below allows attacker to execute unauthorized code or commands via…
• CVE-2021-36182 - CVSS 8.8 (high), 2021-09-08: A Improper neutralization of special elements used in a command ('Command Injection') in Fortinet FortiWeb version 6.3.13 and below allows attacker to execute…