Skip to content

Fortinet Fortiweb vulnerabilities

fortinet fortiwebA uncontrolled resource consumption in Fortinet FortiWeb version 6.4.0, version 6.3.15 and below,...CVE-2021-361875.3 MediumNovember 2, 2021
fortinet fortiwebmanager, fortiweb +1 moreAn improper neutralization of input vulnerability [CWE-79] in FortiWebManager versions 6.2.3 and...CVE-2021-361754.1 MediumOctober 6, 2021
fortinet fortiwebA Improper neutralization of special elements used in a command ('Command Injection') in Fortinet...CVE-2021-361828.8 HighSeptember 8, 2021
fortinet fortiwebA stack-based buffer overflow in Fortinet FortiWeb version 6.3.14 and below, 6.2.4 and below...CVE-2021-361798.0 HighSeptember 8, 2021
fortinet fortiwebAn OS command injection vulnerability in FortiWeb's management interface 6.3.7 and below, 6.2.3...CVE-2021-22123Public exploitEPSS 84.4%7.6 HighJune 1, 2021
fortinet fortiwebAn information disclosure vulnerability in Web Vulnerability Scan profile of Fortinet's FortiWeb...CVE-2020-159424.3 MediumApril 12, 2021
fortinet fortiwebAn improper neutralization of input during web page generation in FortiWeb GUI interface 6.3.0...CVE-2021-22122EPSS 10.5%6.1 MediumFebruary 8, 2021
fortinet fortiwebA blind SQL injection in the user interface of FortiWeb 6.3.0 through 6.3.7 and version before 6...CVE-2020-290159.8 CriticalJanuary 14, 2021
fortinet fortiwebA format string vulnerability in FortiWeb 6.3.0 through 6.3.5 may allow an authenticated, remote...CVE-2020-290188.8 HighJanuary 14, 2021
fortinet fortiwebA stack-based buffer overflow vulnerability in FortiWeb 6.3.0 through 6.3.5 and version before 6...CVE-2020-290169.8 CriticalJanuary 14, 2021
fortinet fortiwebA stack-based buffer overflow vulnerability in FortiWeb 6.3.0 through 6.3.7 and version before 6...CVE-2020-290195.3 MediumJanuary 14, 2021
fortinet fortiwebAn improper neutralization of input vulnerability in FortiWeb allows a remote authenticated...CVE-2020-66465.4 MediumMarch 17, 2020
fortinet fortiwebAn information exposure vulnerability in Fortinet FortiWeb 6.2.0 CLI and earlier may allow an...CVE-2019-161576.5 MediumMarch 13, 2020
fortinet fortiwebAn Improper Neutralization of Input vulnerability in the Anomaly Detection Parameter Name in...CVE-2019-161566.1 MediumMarch 12, 2020
fortinet fortiwebThe URL part of the report message is not encoded in Fortinet FortiWeb 6.0.2 and below which may...CVE-2019-55906.1 MediumAugust 28, 2019
fortinet fortiwebAn Improper Access Control vulnerability in Fortinet FortiWeb 5.6.0 up to but not including 6.1.0...CVE-2017-141915.9 MediumMarch 20, 2018
fortinet fortiwebMultiple cross-site scripting (XSS) vulnerabilities in FortiWeb before 4.4.4 allow remote...CVE-2012-63466.1 MediumFebruary 9, 2018
fortinet fortiwebmanager, fortiweb manager +1 moreAn improper access control vulnerability in Fortinet FortiWebManager 5.8.0 allows anyone that can...CVE-2017-141899.8 CriticalNovember 29, 2017
fortinet fortiweb, fortinet, inc. fortinet fortiweb +1 moreA stored Cross-site Scripting (XSS) vulnerability in Fortinet FortiWeb webUI Certificate View...CVE-2017-77365.4 MediumNovember 22, 2017
fortinet fortiweb, fortinet, inc. fortinet fortiweb +1 moreAn information disclosure vulnerability in Fortinet FortiWeb 5.8.2 and below versions allows...CVE-2017-77374.9 MediumAugust 10, 2017
fortinet fortiweb, fortinet, inc. fortinet fortiweb +1 moreA Cross-Site Scripting vulnerability in Fortinet FortiWeb versions 5.7.1 and below allows...CVE-2017-31296.1 MediumMay 26, 2017
fortinet fortiwebDirectory traversal vulnerability in Fortinet FortiWeb before 5.5.3 allows remote authenticated...CVE-2016-50924.9 MediumJuly 13, 2016
fortinet fortiwebCross-site request forgery (CSRF) vulnerability in Fortinet FortiWeb before 5.5.3 allows remote...CVE-2016-40668.8 HighJuly 13, 2016
fortinet fortiwebCross-site scripting (XSS) vulnerability in the autolearn configuration page in Fortinet FortiWeb...CVE-2014-86194.3 MediumMay 12, 2015
fortinet fortiwebMultiple cross-site scripting (XSS) vulnerabilities in FortiGuard FortiWeb 5.0.x, 5.1.x, and 5.2...CVE-2014-47384.3 MediumJuly 11, 2014
fortinet fortiwebMultiple cross-site request forgery (CSRF) vulnerabilities in the web administration console in...CVE-2014-31156.8 MediumMay 8, 2014
fortinet fortiwebFortiGuard FortiWeb before 5.0.3 allows remote authenticated users to gain privileges via...CVE-2014-19576.5 MediumApril 30, 2014
fortinet fortiwebCRLF injection vulnerability in FortiGuard FortiWeb before 5.0.3 allows remote attackers to...CVE-2014-19565.0 MediumApril 30, 2014
fortinet fortiwebCross-site scripting (XSS) vulnerability in FortiGuard FortiWeb before 5.0.3 allows remote...CVE-2014-19554.3 MediumApril 30, 2014
fortinet fortiwebCross-site scripting (XSS) vulnerability in the web administration interface in FortiGuard...CVE-2014-14583.5 LowFebruary 4, 2014
fortinet fortiwebCross-site scripting (XSS) vulnerability in user/ldap_user/add in Fortinet FortiOS 5.0.3 allows...CVE-2013-71814.3 MediumFebruary 4, 2014