Fortinet FortiWeb is a Web application layer firewall from Fortinet that blocks threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks, secures Web applications and protects sensitive database content. Versions 6.4.1 and 6.4.0 contain a buffer overflow vulnerability that can be exploited by an authenticated attacker to execute unauthorized code or commands via a crafted certificate loaded into the device.
CPE | Name | Operator | Version |
---|---|---|---|
fortinet fortinet fortiweb | eq | 6.4.1 | |
fortinet fortinet fortiweb | eq | 6.4.0 |