Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-18295
HistoryMar 01, 2023 - 12:00 a.m.

Fortinet FortiWeb Formatting String Error Vulnerability

2023-03-0100:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
fortinet
web application firewall
cross-site scripting
sql injection
command parameters
formatted string error
sensitive database content
attack

0.0004 Low

EPSS

Percentile

5.2%

Fortinet FortiWeb is a web application layer firewall from Fortinet that blocks threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks, secures web applications and protects sensitive database content. A formatted string error vulnerability exists that could be exploited by an attacker to execute unauthorized code or commands via specially crafted command parameters.

0.0004 Low

EPSS

Percentile

5.2%

Related for CNVD-2023-18295