FortiWeb - OS command injection due to unsafe input validation function

2022-02-0100:00:00

FortiGuard Labs

www.fortiguard.com

0.001 Low

EPSS

Percentile

48.7%

JSON

An improper neutralization of special elements used in an OS command vulnerabilityÂ (‘OS Command Injection’) [CWE-78] in FortiWeb may allow authenticated users to executeÂ unauthorized code or commands via crafted HTTP GET requests to WAD configuration handlers.

CPENameOperatorVersion
fortiwebeq6.4.1
fortiwebeq6.4.0
fortiwebeq6.3.9
fortiwebeq6.3.8
fortiwebeq6.3.7
fortiwebeq6.3.6
fortiwebeq6.3.5
fortiwebeq6.3.4
fortiwebeq6.3.3
fortiwebeq6.3.2

Name	Operator	Version
fortiweb	eq	6.4.1
fortiweb	eq	6.4.0
fortiweb	eq	6.3.9
fortiweb	eq	6.3.8
fortiweb	eq	6.3.7
fortiweb	eq	6.3.6
fortiweb	eq	6.3.5
fortiweb	eq	6.3.4
fortiweb	eq	6.3.3
fortiweb	eq	6.3.2

Rows per page:

1-10 of 251

0.001 Low

EPSS

Percentile

48.7%

JSON

Related for FG-IR-21-166