Fortinet

Fortiweb

111 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.5

CVE-2024-23107

  • EPSS 0.18%
  • Veröffentlicht 03.06.2024 08:15:08
  • Zuletzt bearbeitet 17.12.2024 16:51:35

An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiWeb version 7.4.0, version 7.2.4 and below, version 7.0.8 and below, 6.3 all versions may allow an authenticated attacker to read password hashes of other a...

5.3

CVE-2023-46713

  • EPSS 0.15%
  • Veröffentlicht 13.12.2023 07:15:24
  • Zuletzt bearbeitet 21.11.2024 08:29:08

An improper output neutralization for logs in Fortinet FortiWeb 6.2.0 - 6.2.8, 6.3.0 - 6.3.23, 7.0.0 - 7.0.9, 7.2.0 - 7.2.5 and 7.4.0 may allow an attacker to forge traffic logs via a crafted URL of the web application.

8.8

CVE-2023-34984

  • EPSS 0.37%
  • Veröffentlicht 13.09.2023 13:15:08
  • Zuletzt bearbeitet 21.11.2024 08:07:46

A protection mechanism failure in Fortinet FortiWeb 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4.0 through 6.4.3, 6.3.6 through 6.3.23 allows attacker to execute unauthorized code or commands via specially crafted HTTP requests.

7.2

CVE-2023-23777

  • EPSS 0.31%
  • Veröffentlicht 11.07.2023 09:15:09
  • Zuletzt bearbeitet 21.11.2024 07:46:48

An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in FortiWeb version 7.0.1 and below, 6.4 all versions, version 6.3.18 and below may allow a privileged attacker to execute arbitrary ...

6.5

CVE-2023-33305

  • EPSS 0.14%
  • Veröffentlicht 13.06.2023 09:15:18
  • Zuletzt bearbeitet 21.11.2024 08:05:22

A loop with unreachable exit condition ('infinite loop') in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS version 7.0.0 through 7.0.10, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiProxy version 7.2.0 th...

7.8

CVE-2022-43948

  • EPSS 0.11%
  • Veröffentlicht 11.04.2023 17:15:07
  • Zuletzt bearbeitet 21.11.2024 07:27:23

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb version 7.0.0 through 7.0.3, FortiADC version 7.1.0 through 7.1.1, FortiADC version 7.0.0 through 7.0.3, FortiADC 6.2 all versions, Fort...

6.1

CVE-2022-43955

  • EPSS 0.2%
  • Veröffentlicht 11.04.2023 17:15:07
  • Zuletzt bearbeitet 21.11.2024 07:27:24

An improper neutralization of input during web page generation [CWE-79] in the FortiWeb web interface 7.0.0 through 7.0.3, 6.3.0 through 6.3.21, 6.4 all versions, 6.2 all versions, 6.1 all versions and 6.0 all versions may allow an unauthenticated an...

5.5

CVE-2022-22297

  • EPSS 0.07%
  • Veröffentlicht 07.03.2023 17:15:11
  • Zuletzt bearbeitet 21.11.2024 06:46:35

An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiWeb version 6.4.0 through 6.4.1, FortiWeb version 6.3.0 through 6.3.17, FortiWeb all versions 6.2, FortiWeb all versi...

8.8

CVE-2022-39951

  • EPSS 0.4%
  • Veröffentlicht 07.03.2023 17:15:11
  • Zuletzt bearbeitet 21.11.2024 07:18:32

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb version 7.0.0 through 7.0.2, FortiWeb version 6.3.6 through 6.3.20, FortiWeb 6.4 all versions allows attacker to execute unauthorized co...

3.3

CVE-2023-22636

  • EPSS 0.06%
  • Veröffentlicht 27.02.2023 09:15:09
  • Zuletzt bearbeitet 21.11.2024 07:45:05

An unauthorized configuration download vulnerability in FortiWeb 6.3.6 through 6.3.21, 6.4.0 through 6.4.2 and 7.0.0 through 7.0.4 may allow a local attacker to access confidential configuration files via a crafted http request.