Skip to contentFortinet Fortiweb vulnerabilities
- fortinet fortiwebA relative path traversal in FortiWeb versions 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow...CVE-2021-410266.5 Medium
- fortinet fortiwebA heap-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and...CVE-2021-430718.8 High
- fortinet fortiwebMultiple stack-based buffer overflows in the API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0...CVE-2021-361948.8 High
- fortinet fortiwebMultiple heap-based buffer overflow vulnerabilities in some web API controllers of FortiWeb 6.4.1...CVE-2021-410178.8 High
- fortinet fortiwebMultiple vulnerabilities in the authentication mechanism of confd in FortiWeb versions 6.4.1, 6.4...CVE-2021-410257.3 High
- fortinet fortiwebMultiple command injection vulnerabilities in the command line interpreter of FortiWeb versions 6...CVE-2021-361954.2 Medium
- fortinet fortiwebAn improper access control vulnerability [CWE-284] in FortiWeb versions 6.4.1 and below and 6.3...CVE-2021-410135.3 Medium
- fortinet fortiwebA improper neutralization of input during web page generation ('cross-site scripting') in...CVE-2021-361886.1 Medium
- fortinet fortiwebA improper neutralization of input during web page generation ('cross-site scripting') in...CVE-2021-430636.1 Medium
- fortinet fortiwebA unintended proxy or intermediary ('confused deputy') in Fortinet FortiWeb version 6.4.1 and...CVE-2021-361905.5 Medium
- fortinet fortiwebA uncontrolled resource consumption in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and...CVE-2021-410147.5 High
- fortinet fortiwebA url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and...CVE-2021-361914.1 Medium
- fortinet fortiwebA stack-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, allows an...CVE-2021-410277.3 High
- fortinet fortiwebA improper neutralization of input during web page generation ('cross-site scripting') in...CVE-2021-410156.1 Medium
- fortinet fortiwebA url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and 6.4...CVE-2021-430644.3 Medium
- fortinet fortiwebMultiple improper neutralization of special elements used in a command vulnerabilities [CWE-77]...CVE-2021-361808.1 High
- fortinet fortiwebA stack-based buffer overflow in Fortinet FortiWeb version 6.4.0, version 6.3.15 and below, 6.2.5...CVE-2021-361868.8 High
- fortinet fortiwebA uncontrolled resource consumption in Fortinet FortiWeb version 6.4.0, version 6.3.15 and below,...CVE-2021-361875.3 Medium
- fortinet fortiwebmanager, fortiweb +1 moreAn improper neutralization of input vulnerability [CWE-79] in FortiWebManager versions 6.2.3 and...CVE-2021-361754.1 Medium
- fortinet fortiwebA Improper neutralization of special elements used in a command ('Command Injection') in Fortinet...CVE-2021-361828.8 High
- fortinet fortiwebA stack-based buffer overflow in Fortinet FortiWeb version 6.3.14 and below, 6.2.4 and below...CVE-2021-361798.0 High
- fortinet fortiwebAn OS command injection vulnerability in FortiWeb's management interface 6.3.7 and below, 6.2.3...CVE-2021-22123Public exploitEPSS 84.4%7.6 High
- fortinet fortiwebAn information disclosure vulnerability in Web Vulnerability Scan profile of Fortinet's FortiWeb...CVE-2020-159424.3 Medium
- fortinet fortiwebAn improper neutralization of input during web page generation in FortiWeb GUI interface 6.3.0...CVE-2021-22122EPSS 10.5%6.1 Medium
- fortinet fortiwebA blind SQL injection in the user interface of FortiWeb 6.3.0 through 6.3.7 and version before 6...CVE-2020-290159.8 Critical
- fortinet fortiwebA format string vulnerability in FortiWeb 6.3.0 through 6.3.5 may allow an authenticated, remote...CVE-2020-290188.8 High
- fortinet fortiwebA stack-based buffer overflow vulnerability in FortiWeb 6.3.0 through 6.3.5 and version before 6...CVE-2020-290169.8 Critical
- fortinet fortiwebA stack-based buffer overflow vulnerability in FortiWeb 6.3.0 through 6.3.7 and version before 6...CVE-2020-290195.3 Medium
- fortinet fortiwebAn improper neutralization of input vulnerability in FortiWeb allows a remote authenticated...CVE-2020-66465.4 Medium
- fortinet fortiwebAn information exposure vulnerability in Fortinet FortiWeb 6.2.0 CLI and earlier may allow an...CVE-2019-161576.5 Medium
- fortinet fortiwebAn Improper Neutralization of Input vulnerability in the Anomaly Detection Parameter Name in...CVE-2019-161566.1 Medium
- fortinet fortiweb, fortinet, inc. fortinet fortiweb +1 moreA stored Cross-site Scripting (XSS) vulnerability in Fortinet FortiWeb webUI Certificate View...CVE-2017-77365.4 Medium
- fortinet fortiweb, fortinet, inc. fortinet fortiweb +1 moreAn information disclosure vulnerability in Fortinet FortiWeb 5.8.2 and below versions allows...CVE-2017-77374.9 Medium
- fortinet fortiweb, fortinet, inc. fortinet fortiweb +1 moreA Cross-Site Scripting vulnerability in Fortinet FortiWeb versions 5.7.1 and below allows...CVE-2017-31296.1 Medium