| CVE-2021-41026 |
A relative path traversal in FortiWeb versions 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow an authenticated…
|
6.5
Moyenne
|
6 avr. 2022 |
| CVE-2021-43071 |
A heap-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below, version 6.2.6 and…
|
8.8
Élevée
|
9 déc. 2021 |
| CVE-2021-36194 |
Multiple stack-based buffer overflows in the API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may…
|
8.8
Élevée
|
9 déc. 2021 |
| CVE-2021-41017 |
Multiple heap-based buffer overflow vulnerabilities in some web API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0…
|
8.8
Élevée
|
8 déc. 2021 |
| CVE-2021-41025 |
Multiple vulnerabilities in the authentication mechanism of confd in FortiWeb versions 6.4.1, 6.4.0, 6.3.0 through…
|
7.3
Élevée
|
8 déc. 2021 |
| CVE-2021-36195 |
Multiple command injection vulnerabilities in the command line interpreter of FortiWeb versions 6.4.1, 6.4.0, 6.3.0…
|
4.2
Moyenne
|
8 déc. 2021 |
| CVE-2021-41013 |
An improper access control vulnerability [CWE-284] in FortiWeb versions 6.4.1 and below and 6.3.15 and below in the…
|
5.3
Moyenne
|
8 déc. 2021 |
| CVE-2021-36188 |
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version…
|
6.1
Moyenne
|
8 déc. 2021 |
| CVE-2021-43063 |
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version…
|
6.1
Moyenne
|
8 déc. 2021 |
| CVE-2021-36190 |
A unintended proxy or intermediary ('confused deputy') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below…
|
5.5
Moyenne
|
8 déc. 2021 |
| CVE-2021-41014 |
A uncontrolled resource consumption in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows an…
|
7.5
Élevée
|
8 déc. 2021 |
| CVE-2021-36191 |
A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below…
|
4.1
Moyenne
|
8 déc. 2021 |
| CVE-2021-41027 |
A stack-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, allows an authenticated attacker to…
|
7.3
Élevée
|
8 déc. 2021 |
| CVE-2021-41015 |
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version…
|
6.1
Moyenne
|
8 déc. 2021 |
| CVE-2021-43064 |
A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and…
|
4.3
Moyenne
|
8 déc. 2021 |
| CVE-2021-36180 |
Multiple improper neutralization of special elements used in a command vulnerabilities [CWE-77] in FortiWeb management…
|
8.1
Élevée
|
8 déc. 2021 |
| CVE-2021-36186 |
A stack-based buffer overflow in Fortinet FortiWeb version 6.4.0, version 6.3.15 and below, 6.2.5 and below allows…
|
8.8
Élevée
|
2 nov. 2021 |
| CVE-2021-36187 |
A uncontrolled resource consumption in Fortinet FortiWeb version 6.4.0, version 6.3.15 and below, 6.2.5 and below allows…
|
5.3
Moyenne
|
2 nov. 2021 |
| CVE-2021-36182 |
A Improper neutralization of special elements used in a command ('Command Injection') in Fortinet FortiWeb version…
|
8.8
Élevée
|
8 sept. 2021 |
| CVE-2021-36179 |
A stack-based buffer overflow in Fortinet FortiWeb version 6.3.14 and below, 6.2.4 and below allows attacker to…
|
8.0
Élevée
|
8 sept. 2021 |
| CVE-2021-22123 |
An OS command injection vulnerability in FortiWeb's management interface 6.3.7 and below, 6.2.3 and below, 6.1.x, 6.0.x,…
|
7.6
Élevée
|
1 juin 2021 |
| CVE-2020-15942 |
An information disclosure vulnerability in Web Vulnerability Scan profile of Fortinet's FortiWeb version 6.2.x below…
|
4.3
Moyenne
|
12 avr. 2021 |
| CVE-2021-22122 |
An improper neutralization of input during web page generation in FortiWeb GUI interface 6.3.0 through 6.3.7 and version…
|
Non notée
|
8 févr. 2021 |
| CVE-2020-29018 |
A format string vulnerability in FortiWeb 6.3.0 through 6.3.5 may allow an authenticated, remote attacker to read the…
|
Non notée
|
14 janv. 2021 |
| CVE-2020-29016 |
A stack-based buffer overflow vulnerability in FortiWeb 6.3.0 through 6.3.5 and version before 6.2.4 may allow an…
|
Non notée
|
14 janv. 2021 |