| CVE-2022-22297 |
An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line…
|
5.2
Medium
|
Mar 7, 2023 |
| CVE-2022-39951 |
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb…
|
7.2
High
|
Mar 7, 2023 |
| CVE-2023-22636 |
An unauthorized configuration download vulnerability in FortiWeb 6.3.6 through 6.3.21, 6.4.0 through 6.4.2 and 7.0.0…
|
6.6
Medium
|
Feb 27, 2023 |
| CVE-2022-40683 |
A double free in Fortinet FortiWeb version 7.0.0 through 7.0.3 may allows attacker to execute unauthorized code or…
|
7.1
High
|
Feb 16, 2023 |
| CVE-2023-23778 |
A relative path traversal vulnerability [CWE-23] in FortiWeb version 7.0.1 and below, 6.4 all versions, 6.3 all…
|
4.7
Medium
|
Feb 16, 2023 |
| CVE-2023-23779 |
Multiple improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities…
|
6.6
Medium
|
Feb 16, 2023 |
| CVE-2022-30306 |
A stack-based buffer overflow vulnerability [CWE-121] in the CA sign functionality of FortiWeb version 7.0.1 and…
|
6.3
Medium
|
Feb 16, 2023 |
| CVE-2022-33871 |
A stack-based buffer overflow vulnerability [CWE-121] in FortiWeb version 7.0.1 and earlier, 6.4 all versions, version…
|
6.3
Medium
|
Feb 16, 2023 |
| CVE-2023-23781 |
A stack-based buffer overflow vulnerability [CWE-121] in FortiWeb version 7.0.1 and below, 6.4 all versions, version…
|
6.1
Medium
|
Feb 16, 2023 |
| CVE-2023-23782 |
A heap-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb version 6.3.0 through 6.3.19,…
|
7.1
High
|
Feb 16, 2023 |
| CVE-2023-23783 |
A use of externally-controlled format string in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb 6.4 all versions…
|
6.5
Medium
|
Feb 16, 2023 |
| CVE-2023-23784 |
A relative path traversal in Fortinet FortiWeb version 7.0.0 through 7.0.2, FortiWeb version 6.3.6 through 6.3.20,…
|
5.6
Medium
|
Feb 16, 2023 |
| CVE-2023-23780 |
A stack-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, Fortinet FortiWeb version 6.3.6…
|
7.6
High
|
Feb 16, 2023 |
| CVE-2023-25602 |
A stack-based buffer overflow in Fortinet FortiWeb 6.4 all versions, FortiWeb versions 6.3.17 and earlier, FortiWeb…
|
7.4
High
|
Feb 16, 2023 |
| CVE-2021-42756 |
Multiple stack-based buffer overflow vulnerabilities [CWE-121] in the proxy daemon of FortiWeb 5.x all versions, 6.0.7…
|
9.3
Critical
|
Feb 16, 2023 |
| CVE-2021-42761 |
A condition for session fixation vulnerability [CWE-384] in the session management of FortiWeb versions 6.4 all…
|
8.5
High
|
Feb 16, 2023 |
| CVE-2022-30299 |
A path traversal vulnerability [CWE-23] in the API of FortiWeb 7.0.0 through 7.0.1, 6.3.0 through 6.3.19, 6.4 all…
|
5.0
Medium
|
Feb 16, 2023 |
| CVE-2021-43074 |
An improper verification of cryptographic signature vulnerability [CWE-347] in FortiWeb 6.4 all versions, 6.3.16 and…
|
4.1
Medium
|
Feb 16, 2023 |
| CVE-2022-30300 |
A relative path traversal vulnerability [CWE-23] in FortiWeb 7.0.0 through 7.0.1, 6.3.6 through 6.3.18, 6.4 all versions…
|
6.2
Medium
|
Feb 16, 2023 |
| CVE-2022-30303 |
An improper neutralization of special elements used in an os command ('OS Command Injection') [CWE-78] in FortiWeb 7.0.0…
|
8.6
High
|
Feb 16, 2023 |
| CVE-2022-42471 |
An improper neutralization of CRLF sequences in HTTP headers ('HTTP Response Splitting') vulnerability [CWE-113] In…
|
5.3
Medium
|
Jan 3, 2023 |
| CVE-2021-36193 |
Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an…
|
6.3
Medium
|
Feb 2, 2022 |
| CVE-2021-42757 |
A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may…
|
6.3
Medium
|
Dec 8, 2021 |
| CVE-2019-5590 |
The URL part of the report message is not encoded in Fortinet FortiWeb 6.0.2 and below which may allow an attacker to…
|
Not rated
|
Aug 28, 2019 |