Not rated
CVE-2019-16156 An Improper Neutralization of Input vulnerability in the Anomaly Detection Parameter Name in Fortinet FortiWeb 6.0.5,…
Description
An Improper Neutralization of Input vulnerability in the Anomaly Detection Parameter Name in Fortinet FortiWeb 6.0.5, 6.2.0, and 6.1.1 may allow a remote unauthenticated attacker to perform a Cross Site Scripting attack (XSS).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Fortinet FortiWeb | 6.2.0 | No fix stated |
| Fortinet FortiWeb | 6.1.1 | No fix stated |
| Fortinet FortiWeb | 6.0.5 | No fix stated |
Other CVEs of Fortinet FortiWeb
The 27 CVEs of Fortinet FortiWeb →
CVE-2021-41026
A relative path traversal in FortiWeb versions 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow an authenticated…
6.5
Medium
CVE-2021-43071
A heap-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below, version 6.2.6 and…
8.8
High
CVE-2021-36194
Multiple stack-based buffer overflows in the API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may…
8.8
High
CVE-2021-41017
Multiple heap-based buffer overflow vulnerabilities in some web API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0…
8.8
High