Fortinet, Inc. Fortinet Fortiweb vulnerabilities

3 vulnerabilities

Known vulnerabilities in Fortinet, Inc. Fortinet Fortiweb, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.9CVE-2017-7737fortinet, inc.fortinet fortiweb+1
EPSS score
1.06%
An information disclosure vulnerability in Fortinet FortiWeb 5.8.2 and below versions allows logged-in admin user to view SNMPv3 user password in cleartext in webui via the HTML source code.5.4CVE-2017-7736fortinet, inc.fortinet fortiweb+1
EPSS score
0.33%
A stored Cross-site Scripting (XSS) vulnerability in Fortinet FortiWeb webUI Certificate View page in 5.8.0, 5.7.1 and earlier, allows attackers to inject arbitrary web script or HTML via special crafted malicious certificate import.6.1CVE-2017-3129fortinet, inc.fortinet fortiweb+1
EPSS score
0.71%
A Cross-Site Scripting vulnerability in Fortinet FortiWeb versions 5.7.1 and below allows attacker to execute unauthorized code or commands via an improperly sanitized POST parameter in the FortiWeb Site Publisher feature.