Fortinet FortiWeb 竞争条件问题漏洞

Fortinet FortiWeb is a web application layer firewall from Fortinet that blocks threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks, secures web applications and protects sensitive database content. A security vulnerability exists that could b...

Fortinet FortiWeb 跨站脚本漏洞

Fortinet FortiWeb is a web application layer firewall from Fortinet that blocks threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning, and other attacks to secure web applications and protect sensitive database content. A cross-site scripting vulnerability exists...

Fortinet FortiClient 安全漏洞

Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance, and two-factor authentication when connected to a FortiGate firewall appliance. A security vulnerability exists in Fortinet FortiClient...

Fortinet FortiWeb安全漏洞

Fortinet FortiWeb is a web application layer firewall from Fortinet that blocks threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks, secures web applications and protects sensitive database content. fortinet FortiWeb A security vulnerability...

Fortinet FortiWeb 资源管理错误漏洞

Fortinet FortiWeb is a Web application layer firewall from the U.S. company Fita Fortinet, which can block threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks to ensure the security of Web applications and protect sensitive database content. A...

CVE-2021-36188: Improper Neutralization of Input During Web Page Generation

A improper neutralization of input during web page generation 'cross-site scripting' in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows attacker to execute unauthorized code or commands via crafted GET parameters in requests to login and error handlers...

CVE-2021-41029: Improper Neutralization of Input During Web Page Generation

A improper neutralization of input during web page generation 'cross-site scripting' in Fortinet FortiWLM version 8.6.1 and below allows attacker to store malicious javascript code in the device and trigger it via crafted HTTP requests...

PT-2021-23741

Name of the Vulnerable Software and Affected Versions Fortinet FortiWeb versions 6.4.1 through 6.4.0 Fortinet FortiWeb version 6.3.15 and below Fortinet FortiWeb version 6.2.6 and below Description The issue allows for a url redirection to an untrusted site, also known as an 'open redirect',...

PT-2021-21173

Name of the Vulnerable Software and Affected Versions Fortinet FortiWeb versions 6.4.1 and below Fortinet FortiWeb versions 6.3.15 and below Description The issue allows an attacker to use the device as a proxy via crafted GET parameters in requests to error handlers, due to a url redirection to...

CVE-2021-36191: URL Redirection to Untrusted Site

A url redirection to untrusted site 'open redirect' in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows attacker to use the device as proxy via crafted GET parameters in requests to error handlers...

Fortinet FortiOS 安全漏洞

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. An access control error...

CVE-2021-41014: Uncontrolled Resource Consumption

A uncontrolled resource consumption in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows an unauthenticated attacker to make the httpsd daemon unresponsive via huge HTTP packets...

Fortinet FortiWeb输入验证错误漏洞

Fortinet FortiWeb is a web application layer firewall from Fortinet that blocks threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks, secures web applications and protects sensitive database content.Fortinet FortiWeb An input validation error...

PT-2021-23049

Name of the Vulnerable Software and Affected Versions Fortinet FortiWeb versions 6.4.1 and below Fortinet FortiWeb versions 6.3.15 and below Description The issue is related to uncontrolled resource consumption, allowing an unauthenticated attacker to make the httpsd daemon unresponsive via huge...

PT-2021-23672

Name of the Vulnerable Software and Affected Versions Fortinet FortiWLM versions 8.6.1 and below Description The issue is related to improper neutralization of input during web page generation, which can lead to cross-site scripting. This allows an attacker to execute malicious javascript code on...

PT-2021-23675

Name of the Vulnerable Software and Affected Versions Fortinet FortiWLM versions 8.6.1 and below Description The issue is related to an improper neutralization of special elements used in an SQL command, also known as 'sql injection'. This allows an attacker to disclose sensitive information from...

CVE-2021-42752: Improper Neutralization of Input During Web Page Generation

A improper neutralization of input during web page generation 'cross-site scripting' in Fortinet FortiWLM version 8.6.1 and below allows attacker to execute malicious javascript code on victim's host via crafted HTTP requests...

Fortinet FortiWeb跨站脚本漏洞

Fortinet FortiWeb is a web application layer firewall from Fortinet that blocks threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks, secures web applications and protects sensitive database content. versions 6.4.1 and earlier and 6.3.15 and...

Fortinet FortiOS 输入验证错误漏洞

Fortinet FortiOS is a security operating system dedicated to the FortiGate network security platform from Fortinet, a US-based company. Fortinet FortiOS is vulnerable to an integer overflow vulnerability that could be exploited by an attacker to corrupt control data on the heap with a specially...

Fortinet FortiWLC 访问控制错误漏洞

The Fortinet FortiWLC is a wireless LAN controller from Fortinet. An access control error vulnerability exists in the Fortinet FortiWLC, which arises from the product's GUI restrictions not validating the user's identity. The vulnerability can be exploited to execute arbitrary commands. The...