Fortiwlm (Fortinet) - vulnerabilities (CVEs)
23 CVEs, 0 in the last 30 days, 21 known versions, newest CVE from 2024-12-18. Vendor: Fortinet.
CVEs of Fortiwlm
- CVE-2023-34990 - CVSS 9.8 (critical), 2024-12-18: A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands…
- CVE-2023-48782 - CVSS 8.8 (high), 2023-12-13: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 allows attacker…
- CVE-2023-42783 - CVSS 7.5 (high), 2023-11-14: A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 and 8.4.2 through 8.4.0 and 8.3.2 through 8.3.0 and 8.2.2…
- CVE-2023-34991 - CVSS 9.8 (critical), 2023-11-14: A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through…
- CVE-2023-36550 - CVSS 9.8 (critical), 2023-10-10: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0…
- CVE-2023-34988 - CVSS 8.8 (high), 2023-10-10: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0…
- CVE-2023-36547 - CVSS 9.8 (critical), 2023-10-10: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0…
- CVE-2023-34987 - CVSS 8.8 (high), 2023-10-10: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0…
- CVE-2023-34993 - CVSS 9.8 (critical), 2023-10-10: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0…
- CVE-2023-36549 - CVSS 9.8 (critical), 2023-10-10: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0…
- CVE-2023-34986 - CVSS 8.8 (high), 2023-10-10: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0…
- CVE-2023-34989 - CVSS 8.8 (high), 2023-10-10: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0…
- CVE-2023-36548 - CVSS 9.8 (critical), 2023-10-10: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0…
- CVE-2023-34985 - CVSS 8.8 (high), 2023-10-10: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0…
- CVE-2021-43070 - CVSS 6.5 (medium), 2022-03-02: Multiple relative path traversal vulnerabilities [CWE-23] in FortiWLM management interface 8.6.2 and below, 8.5.2 and below, 8.4.2 and below, 8.3.3 and below,…
- CVE-2021-43077 - CVSS 8.8 (high), 2022-03-01: A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.2 and below, version 8.5.2 and below,…
- CVE-2021-43075 - CVSS 8.8 (high), 2022-03-01: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.2 and below, version 8.5.2 and…
- CVE-2021-42760 - CVSS 8.8 (high), 2021-12-08: A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.1 and below allows attacker to…
- CVE-2021-42752 - CVSS 5.4 (medium), 2021-12-08: A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWLM version 8.6.1 and below allows attacker to execute…
- CVE-2021-41029 - CVSS 6.4 (medium), 2021-12-08: A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWLM version 8.6.1 and below allows attacker to store…
- CVE-2021-36184 - CVSS 8.8 (high), 2021-11-02: A improper neutralization of Special Elements used in an SQL Command ('SQL Injection') in Fortinet FortiWLM version 8.6.1 and below allows attacker to…
- CVE-2021-36185 - CVSS 8.8 (high), 2021-11-02: A improper neutralization of special elements used in an OS command ('OS Command Injection') in Fortinet FortiWLM version 8.6.1 and below allows attacker to…
- CVE-2017-7336 - CVSS 9.8 (critical), 2017-07-22: A hard-coded account named 'upgrade' in Fortinet FortiWLM 8.3.0 and lower versions allows a remote attacker to log-in and execute commands with 'upgrade'…
