| CVE-2021-41026 |
A relative path traversal in FortiWeb versions 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow an authenticated…
|
6.5
Medium
|
Apr 6, 2022 |
| CVE-2021-43071 |
A heap-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below, version 6.2.6 and…
|
8.8
High
|
Dec 9, 2021 |
| CVE-2021-36194 |
Multiple stack-based buffer overflows in the API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may…
|
8.8
High
|
Dec 9, 2021 |
| CVE-2021-41017 |
Multiple heap-based buffer overflow vulnerabilities in some web API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0…
|
8.8
High
|
Dec 8, 2021 |
| CVE-2021-41025 |
Multiple vulnerabilities in the authentication mechanism of confd in FortiWeb versions 6.4.1, 6.4.0, 6.3.0 through…
|
7.3
High
|
Dec 8, 2021 |
| CVE-2021-36195 |
Multiple command injection vulnerabilities in the command line interpreter of FortiWeb versions 6.4.1, 6.4.0, 6.3.0…
|
4.2
Medium
|
Dec 8, 2021 |
| CVE-2021-41013 |
An improper access control vulnerability [CWE-284] in FortiWeb versions 6.4.1 and below and 6.3.15 and below in the…
|
5.3
Medium
|
Dec 8, 2021 |
| CVE-2021-36188 |
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version…
|
6.1
Medium
|
Dec 8, 2021 |
| CVE-2021-43063 |
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version…
|
6.1
Medium
|
Dec 8, 2021 |
| CVE-2021-36190 |
A unintended proxy or intermediary ('confused deputy') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below…
|
5.5
Medium
|
Dec 8, 2021 |
| CVE-2021-41014 |
A uncontrolled resource consumption in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows an…
|
7.5
High
|
Dec 8, 2021 |
| CVE-2021-36191 |
A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below…
|
4.1
Medium
|
Dec 8, 2021 |
| CVE-2021-41027 |
A stack-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, allows an authenticated attacker to…
|
7.3
High
|
Dec 8, 2021 |
| CVE-2021-41015 |
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version…
|
6.1
Medium
|
Dec 8, 2021 |
| CVE-2021-43064 |
A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and…
|
4.3
Medium
|
Dec 8, 2021 |
| CVE-2021-36180 |
Multiple improper neutralization of special elements used in a command vulnerabilities [CWE-77] in FortiWeb management…
|
8.1
High
|
Dec 8, 2021 |
| CVE-2021-36186 |
A stack-based buffer overflow in Fortinet FortiWeb version 6.4.0, version 6.3.15 and below, 6.2.5 and below allows…
|
8.8
High
|
Nov 2, 2021 |
| CVE-2021-36187 |
A uncontrolled resource consumption in Fortinet FortiWeb version 6.4.0, version 6.3.15 and below, 6.2.5 and below allows…
|
5.3
Medium
|
Nov 2, 2021 |
| CVE-2021-36182 |
A Improper neutralization of special elements used in a command ('Command Injection') in Fortinet FortiWeb version…
|
8.8
High
|
Sep 8, 2021 |
| CVE-2021-36179 |
A stack-based buffer overflow in Fortinet FortiWeb version 6.3.14 and below, 6.2.4 and below allows attacker to…
|
8.0
High
|
Sep 8, 2021 |
| CVE-2021-22123 |
An OS command injection vulnerability in FortiWeb's management interface 6.3.7 and below, 6.2.3 and below, 6.1.x, 6.0.x,…
|
7.6
High
|
Jun 1, 2021 |
| CVE-2020-15942 |
An information disclosure vulnerability in Web Vulnerability Scan profile of Fortinet's FortiWeb version 6.2.x below…
|
4.3
Medium
|
Apr 12, 2021 |
| CVE-2021-22122 |
An improper neutralization of input during web page generation in FortiWeb GUI interface 6.3.0 through 6.3.7 and version…
|
Not rated
|
Feb 8, 2021 |
| CVE-2020-29018 |
A format string vulnerability in FortiWeb 6.3.0 through 6.3.5 may allow an authenticated, remote attacker to read the…
|
Not rated
|
Jan 14, 2021 |
| CVE-2020-29016 |
A stack-based buffer overflow vulnerability in FortiWeb 6.3.0 through 6.3.5 and version before 6.2.4 may allow an…
|
Not rated
|
Jan 14, 2021 |