Fortinet Fortiweb vulnerabilities, page 2

27 vulnerabilities

Known vulnerabilities in Fortinet Fortiweb, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2021-22122fortinetfortinet fortiweb+1
EPSS score
10.52%
An improper neutralization of input during web page generation in FortiWeb GUI interface 6.3.0 through 6.3.7 and version before 6.2.4 may allow an unauthenticated, remote attacker to perform a reflected cross site scripting attack (XSS) by injecting malicious payload in different vulnerable API end-points.9CVE-2021-22123fortinetfortinet fortiweb+1
EPSS score
84.40%
An OS command injection vulnerability in FortiWeb's management interface 6.3.7 and below, 6.2.3 and below, 6.1.x, 6.0.x, 5.9.x may allow a remote authenticated attacker to execute arbitrary commands on the system via the SAML server configuration page.9.8CVE-2020-29016fortinetfortinet fortiweb+1
EPSS score
3.44%
A stack-based buffer overflow vulnerability in FortiWeb 6.3.0 through 6.3.5 and version before 6.2.4 may allow an unauthenticated, remote attacker to overwrite the content of the stack and potentially execute arbitrary code by sending a crafted request with a large certname.8.8CVE-2020-29018fortinetfortinet fortiweb+1
EPSS score
2.05%
A format string vulnerability in FortiWeb 6.3.0 through 6.3.5 may allow an authenticated, remote attacker to read the content of memory and retrieve sensitive data via the redir parameter.6.5CVE-2020-15942fortinetfortinet fortiweb+1
EPSS score
0.94%
An information disclosure vulnerability in Web Vulnerability Scan profile of Fortinet's FortiWeb version 6.2.x below 6.2.4 and version 6.3.x below 6.3.5 may allow a remote authenticated attacker to read the password used by the FortiWeb scanner to access the device defined in the scan profile.6.5CVE-2019-16157fortinetfortinet fortiweb+1
EPSS score
0.86%
An information exposure vulnerability in Fortinet FortiWeb 6.2.0 CLI and earlier may allow an authenticated user to view sensitive information being logged via diagnose debug commands.6.1CVE-2019-16156fortinetfortinet fortiweb+1
EPSS score
1.00%
An Improper Neutralization of Input vulnerability in the Anomaly Detection Parameter Name in Fortinet FortiWeb 6.0.5, 6.2.0, and 6.1.1 may allow a remote unauthenticated attacker to perform a Cross Site Scripting attack (XSS).