Code injection

A uncontrolled resource consumption in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows an unauthenticated attacker to make the httpsd daemon unresponsive via huge HTTP packets...

CVE-2021-36190

A unintended proxy or intermediary 'confused deputy' in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows an unauthenticated attacker to access protected hosts via crafted HTTP requests...

CVE-2021-36190

A unintended proxy or intermediary 'confused deputy' in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows an unauthenticated attacker to access protected hosts via crafted HTTP requests...

CVE-2021-36190

Fortinet FortiWeb is affected by CVE-2021-36190. Vulnerable in FortiWeb 6.4.1 and earlier and 6.3.15 and earlier, where an unintended proxy (the “confused deputy”) can be leveraged via crafted HTTP requests to reach protected hosts. The CVE description states unauthenticated access; Fortinet’s FG...

CVE-2021-41014

Fortinet FortiWeb is affected by CVE-2021-41014. FortiWeb versions 6.4.1 and earlier and 6.3.15 and earlier allow an unauthenticated attacker to cause a Denial of Service by sending huge HTTP packets that make the httpsd daemon unresponsive. The vulnerability is documented in Fortinet’s FG-IR-21-...

CVE-2021-41014

A uncontrolled resource consumption in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows an unauthenticated attacker to make the httpsd daemon unresponsive via huge HTTP packets...

CVE-2021-41014

A uncontrolled resource consumption in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows an unauthenticated attacker to make the httpsd daemon unresponsive via huge HTTP packets...

CVE-2021-36191

A url redirection to untrusted site 'open redirect' in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows attacker to use the device as proxy via crafted GET parameters in requests to error handlers...

CVE-2021-36191

A url redirection to untrusted site 'open redirect' in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows attacker to use the device as proxy via crafted GET parameters in requests to error handlers...

CVE-2021-36191

The CVE-2021-36191 issue affects Fortinet FortiWeb: open redirects in FortiWeb versions 6.4.1 and below and 6.3.15 and below. The root cause is a vulnerability in how error handlers process GET parameters, enabling an attacker to cause a redirection to an untrusted site and proxy traffic through ...

CVE-2021-41027

A stack-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, allows an authenticated attacker to execute unauthorized code or commands via crafted certificates loaded into the device...

CVE-2021-41027

CVE-2021-41027 affects Fortinet FortiWeb (versions 6.4.0 and 6.4.1). The issue is a stack-based buffer overflow exploitable by an authenticated attacker via crafted certificates loaded into the device, enabling unauthorized code/command execution. Public sources from Fortinet (FG-IR-21-134) descr...

CVE-2021-41027

A stack-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, allows an authenticated attacker to execute unauthorized code or commands via crafted certificates loaded into the device...

CVE-2021-41015

CVE-2021-41015 is a Fortinet FortiWeb cross-site scripting vulnerability affecting FortiWeb 6.4.1 and earlier, and 6.3.15 and earlier. The root cause is improper neutralization of input during web page generation in the SAML login handler, allowing an unauthenticated attacker to craft HTTP reques...

CVE-2021-41015

A improper neutralization of input during web page generation 'cross-site scripting' in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests to SAML login handler...

CVE-2021-43064

A url redirection to untrusted site 'open redirect' in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below, version 6.2.6 and below allows attacker to use the device as a proxy and reach external or protected hosts via redirection handlers...

CVE-2021-43064

A url redirection to untrusted site 'open redirect' in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below, version 6.2.6 and below allows attacker to use the device as a proxy and reach external or protected hosts via redirection handlers...

CVE-2021-43064

CVE-2021-43064 concerns a Fortinet FortiWeb open redirect vulnerability. The issue occurs in FortiWeb versions 6.4.1/6.4.0, 6.3.15 and below, and 6.2.6 and below, where redirection handlers can be exploited to proxy through the device to external or protected hosts due to an input/interpolation f...

CVE-2021-32591

A missing cryptographic steps vulnerability in the function that encrypts users' LDAP and RADIUS credentials in FortiSandbox before 4.0.1, FortiWeb before 6.3.12, FortiADC before 6.2.1, FortiMail 7.0.1 and earlier may allow an attacker in possession of the password store to compromise the...

Information disclosure

A missing cryptographic steps vulnerability in the function that encrypts users' LDAP and RADIUS credentials in FortiSandbox before 4.0.1, FortiWeb before 6.3.12, FortiADC before 6.2.1, FortiMail 7.0.1 and earlier may allow an attacker in possession of the password store to compromise the...