Fortinet Fortinet FortiWeb vulnerabilities

CVEs per yearBy the year they were published

1. 20202
2. 202124
3. 20221

Newest CVEs

• CVE-2021-41026

  A relative path traversal in FortiWeb versions 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow an authenticated attacker to retrieve arbitrary files from the…

  Fortinet · Fortinet FortiWeb

  Medium6.5
• CVE-2021-43071

  A heap-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below, version 6.2.6 and below allows attacker to execute…

  Fortinet · Fortinet FortiWeb

  High8.8
• CVE-2021-36194

  Multiple stack-based buffer overflows in the API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow an authenticated attacker to achieve…

  Fortinet · Fortinet FortiWeb

  High8.8
• CVE-2021-41017

  Multiple heap-based buffer overflow vulnerabilities in some web API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow a remote…

  Fortinet · Fortinet FortiWeb

  High8.8
• CVE-2021-41025

  Multiple vulnerabilities in the authentication mechanism of confd in FortiWeb versions 6.4.1, 6.4.0, 6.3.0 through 6.3.15, 6.2.0 through 6.2.6, 6.1.0 through…

  Fortinet · Fortinet FortiWeb

  High7.3
• CVE-2021-36195

  Multiple command injection vulnerabilities in the command line interpreter of FortiWeb versions 6.4.1, 6.4.0, 6.3.0 through 6.3.15, 6.2.0 through 6.2.6, and…

  Fortinet · Fortinet FortiWeb

  Medium4.2
• CVE-2021-41013

  An improper access control vulnerability [CWE-284] in FortiWeb versions 6.4.1 and below and 6.3.15 and below in the Report Browse section of Log & Report may…

  Fortinet · Fortinet FortiWeb

  Medium5.3
• CVE-2021-36188

  A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows…

  Fortinet · Fortinet FortiWeb

  Medium6.1
• CVE-2021-43063

  A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below,…

  Fortinet · Fortinet FortiWeb

  Medium6.1
• CVE-2021-36190

  A unintended proxy or intermediary ('confused deputy') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows an unauthenticated attacker to…

  Fortinet · Fortinet FortiWeb

  Medium5.5