Skip to contentFortinet Fortiweb vulnerabilities
- fortinet fortiwebAn improper output neutralization for logs in Fortinet FortiWeb 6.2.0 - 6.2.8, 6.3.0 - 6.3.23, 7...CVE-2023-467134.9 Medium
- fortinet fortiwebA protection mechanism failure in Fortinet FortiWeb 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4...CVE-2023-349847.1 High
- fortinet fortiwebAn improper neutralization of special elements used in an OS command ('OS Command Injection')...CVE-2023-237777.2 High
- fortinet fortios, fortiproxy, fortiweb +2 moreA loop with unreachable exit condition ('infinite loop') in Fortinet FortiOS version 7.2.0...CVE-2023-333054.9 Medium
- fortinet fortiwebAn improper neutralization of input during web page generation [CWE-79] in the FortiWeb web...CVE-2022-439558.0 High
- fortinet fortiadc, fortiweb +1 moreA improper neutralization of special elements used in an os command ('os command injection') in...CVE-2022-439486.5 Medium
- fortinet fortirecorder, fortiweb, fortirecorder firmware +2 moreAn incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in...CVE-2022-222975.2 Medium
- fortinet fortiwebA improper neutralization of special elements used in an os command ('os command injection') in...CVE-2022-399517.2 High
- fortinet fortiwebAn unauthorized configuration download vulnerability in FortiWeb 6.3.6 through 6.3.21, 6.4.0...CVE-2023-226366.6 Medium
- fortinet fortiwebA double free in Fortinet FortiWeb version 7.0.0 through 7.0.3 may allows attacker to execute...CVE-2022-406837.1 High
- fortinet fortiwebA relative path traversal vulnerability [CWE-23] in FortiWeb version 7.0.1 and below, 6.4 all...CVE-2023-237784.7 Medium
- fortinet fortiwebMultiple improper neutralization of special elements used in an OS Command ('OS Command Injection...CVE-2023-237796.6 Medium
- fortinet fortiwebA stack-based buffer overflow vulnerability [CWE-121] in the CA sign functionality of FortiWeb...CVE-2022-303066.3 Medium
- fortinet fortiwebA stack-based buffer overflow vulnerability [CWE-121] in FortiWeb version 7.0.1 and earlier, 6.4...CVE-2022-338716.3 Medium
- fortinet fortiwebA stack-based buffer overflow vulnerability [CWE-121] in FortiWeb version 7.0.1 and below, 6.4...CVE-2023-237816.1 Medium
- fortinet fortiwebA heap-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb version 6...CVE-2023-237827.1 High
- fortinet fortiwebA use of externally-controlled format string in Fortinet FortiWeb version 7.0.0 through 7.0.1,...CVE-2023-237836.5 Medium
- fortinet fortiwebA relative path traversal in Fortinet FortiWeb version 7.0.0 through 7.0.2, FortiWeb version 6.3...CVE-2023-237845.6 Medium
- fortinet fortiwebA stack-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, Fortinet FortiWeb...CVE-2023-237807.6 High
- fortinet fortiwebA stack-based buffer overflow in Fortinet FortiWeb 6.4 all versions, FortiWeb versions 6.3.17 and...CVE-2023-256027.4 High
- fortinet fortiwebMultiple stack-based buffer overflow vulnerabilities [CWE-121] in the proxy daemon of FortiWeb 5...CVE-2021-42756Public exploitEPSS 35.2%9.3 Critical
- fortinet fortiwebA condition for session fixation vulnerability [CWE-384] in the session management of FortiWeb...CVE-2021-427618.5 High
- fortinet fortiwebA path traversal vulnerability [CWE-23] in the API of FortiWeb 7.0.0 through 7.0.1, 6.3.0 through...CVE-2022-302995.0 Medium
- fortinet fortios, fortiproxy, fortiswitch +1 more +3 moreAn improper verification of cryptographic signature vulnerability [CWE-347] in FortiWeb 6.4 all...CVE-2021-430744.1 Medium
- fortinet fortiwebA relative path traversal vulnerability [CWE-23] in FortiWeb 7.0.0 through 7.0.1, 6.3.6 through 6...CVE-2022-303006.2 Medium
- fortinet fortiwebAn improper neutralization of special elements used in an os command ('OS Command Injection') ...CVE-2022-303038.6 High
- fortinet fortiwebAn improper neutralization of CRLF sequences in HTTP headers ('HTTP Response Splitting')...CVE-2022-424715.3 Medium
- fortinet fortiwebA relative path traversal in FortiWeb versions 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow...CVE-2021-410266.5 Medium
- fortinet fortiwebA improper neutralization of special elements used in an os command ('os command injection') in...CVE-2021-410188.8 High
- fortinet fortiweb, fortiadc, fortiddos +7 more +9 moreMultiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2...CVE-2021-361936.3 Medium
- fortinet fortiwebA improper neutralization of special elements used in an os command ('os command injection') in...CVE-2021-430738.8 High
- fortinet fortiwebAn improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability ...CVE-2021-427538.1 High
- fortinet fortiwebA heap-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and...CVE-2021-430718.8 High
- fortinet fortiwebMultiple stack-based buffer overflows in the API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0...CVE-2021-361948.8 High
- fortinet fortiwebMultiple heap-based buffer overflow vulnerabilities in some web API controllers of FortiWeb 6.4.1...CVE-2021-410178.8 High
- fortinet fortiwebMultiple vulnerabilities in the authentication mechanism of confd in FortiWeb versions 6.4.1, 6.4...CVE-2021-410257.3 High
- fortinet fortiwebMultiple command injection vulnerabilities in the command line interpreter of FortiWeb versions 6...CVE-2021-361954.2 Medium
- fortinet fortiwebAn improper access control vulnerability [CWE-284] in FortiWeb versions 6.4.1 and below and 6.3...CVE-2021-410135.3 Medium
- fortinet fortiwebA improper neutralization of input during web page generation ('cross-site scripting') in...CVE-2021-361886.1 Medium
- fortinet fortiwebA improper neutralization of input during web page generation ('cross-site scripting') in...CVE-2021-430636.1 Medium
- fortinet fortiwebA unintended proxy or intermediary ('confused deputy') in Fortinet FortiWeb version 6.4.1 and...CVE-2021-361905.5 Medium
- fortinet fortiwebA uncontrolled resource consumption in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and...CVE-2021-410147.5 High
- fortinet fortiwebA url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and...CVE-2021-361914.1 Medium
- fortinet fortiwebA stack-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, allows an...CVE-2021-410277.3 High
- fortinet fortiwebA improper neutralization of input during web page generation ('cross-site scripting') in...CVE-2021-410156.1 Medium
- fortinet fortiwebA url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and 6.4...CVE-2021-430644.3 Medium
- fortinet fortiadc, fortimail, fortisandbox +1 more +3 moreA missing cryptographic steps vulnerability in the function that encrypts users' LDAP and RADIUS...CVE-2021-325915.3 Medium
- fortinet fortios, fortiadc, fortianalyzer +13 more +15 moreA buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0...CVE-2021-427576.3 Medium
- fortinet fortiwebMultiple improper neutralization of special elements used in a command vulnerabilities [CWE-77]...CVE-2021-361808.1 High
- fortinet fortiwebA stack-based buffer overflow in Fortinet FortiWeb version 6.4.0, version 6.3.15 and below, 6.2.5...CVE-2021-361868.8 High
- Show moreLoading…