Lucene search
+L

1461 matches found

CNVD
CNVD
added 2016/06/28 12:0 a.m.11 views

Fortinet FortiWeb Cross-Site Request Forgery Vulnerability

Fortinet FortiWeb is a Web application layer firewall from the U.S. company Fita Fortinet, which can block threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks to ensure the security of Web applications and protect sensitive database content. A...

8.8CVSS7.3AI score0.00898EPSS
SaveExploits0References1
CNVD
CNVD
added 2016/06/28 12:0 a.m.9 views

Fortinet FortiWeb Path Traversal Vulnerability

Fortinet FortiWeb is a Web application layer firewall from the U.S. company Fita Fortinet, which can block threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks to ensure the security of Web applications and protect sensitive database content. A...

4.9CVSS7.1AI score0.01648EPSS
SaveExploits0References1
Fortinet
Fortinet
added 2016/06/23 12:0 a.m.39 views

FortiWeb CSRF Vulnerability

A CSRF vulnerability could allow attackers to change admin password with crafted forms...

6.8CVSS4.2AI score0.00898EPSS
SaveExploits0
Fortinet
Fortinet
added 2016/05/26 12:0 a.m.33 views

Fortiweb path traversal vulnerability

A path traversal vulnerability allows an administrator account with read and write privileges to read arbitrary files using the autolearn feature...

4CVSS5AI score0.01648EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2016/02/18 12:0 a.m.26 views

Fortinet FortiWeb 5.1.2 < 5.3.5 Autolearn Configuration Multiple XSS

The remote FortiWeb device is running a software version greater than or equal to 5.1.2 and less than 5.3.5. It is, therefore, affected by multiple cross-site scripting vulnerabilities due to improper validation of user-supplied input to the autolearn configuration page. An attacker can exploit...

4.3CVSS5.6AI score0.0136EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2015/06/08 12:0 a.m.21 views

Fortinet FortiWeb Multiple Reflected XSS Vulnerabilities (FG-IR-15-005)

Fortinet FortiWeb is prone to multiple reflected cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...

4.3CVSS5AI score0.0136EPSS
SaveExploits0References3
CNVD
CNVD
added 2015/05/15 12:0 a.m.6 views

Fortinet FortiWeb Cross-Site Scripting Vulnerability

Fortinet FortiWeb is the United States of America Fitta Fortinet a protection, load balancing and acceleration of web applications, database information exchange between the web application layer firewall. A cross-site scripting vulnerability in Fortinet FortiWeb versions 5.1.2 through 5.3.4 allo...

4.3CVSS5.8AI score0.0136EPSS
SaveExploits0References1
NVD
NVD
added 2015/05/12 7:59 p.m.25 views

CVE-2014-8619

Cross-site scripting XSS vulnerability in the autolearn configuration page in Fortinet FortiWeb 5.1.2 through 5.3.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS5.6AI score0.0136EPSS
SaveExploits0References2
Prion
Prion
added 2015/05/12 7:59 p.m.19 views

Cross site scripting

Cross-site scripting XSS vulnerability in the autolearn configuration page in Fortinet FortiWeb 5.1.2 through 5.3.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS6.1AI score0.0136EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2015/05/12 7:0 p.m.28 views

CVE-2014-8619

Cross-site scripting XSS vulnerability in the autolearn configuration page in Fortinet FortiWeb 5.1.2 through 5.3.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

5.6AI score0.0136EPSS
SaveExploits0References2
CVE
CVE
added 2015/05/12 7:0 p.m.63 views

CVE-2014-8619

Fortinet FortiWeb is affected by multiple XSS vulnerabilities in the autolearn configuration page for versions 5.1.2 through 5.3.4. The underlying issue is improper validation of user-supplied input on the autolearn page, enabling attackers to inject arbitrary script or HTML via unspecified vecto...

4.3CVSS5.8AI score0.0136EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2015/04/23 12:0 a.m.29 views

Fortinet FortiWeb < 5.3.5 Multiple Vulnerabilities

The remote host running a version of FortiWeb prior to 5.3.5. It is, therefore, affected by multiple vulnerabilities : - A command injection vulnerability exists due to a flaw that occurs when an administrator is executing reports. An authenticated, remote attacker can exploit this to execute...

5.9AI score
SaveExploits0References1
Fortinet
Fortinet
added 2015/04/16 12:0 a.m.18 views

FortiWeb multiple vulnerabilities

...

6.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2015/04/09 12:0 a.m.22 views

Fortinet FortiWEB Version Detection

Binary data 8648.prm...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2015/04/09 12:0 a.m.13 views

Fortinet FortiWEB Detection via SSL/TLS

Binary data 8646.prm...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2015/04/09 12:0 a.m.16 views

FortiWeb < 5.2.0 Multiple XSRF Vulnerabilities

Binary data 8668.prm...

6.8CVSS7.3AI score0.01179EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2015/04/09 12:0 a.m.19 views

FortiWeb 4.x / 5.x < 5.0.3 Multiple Vulnerabilities

Binary data 8670.prm...

6.5CVSS6.8AI score0.01516EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2015/04/09 12:0 a.m.9 views

Fortinet FortiWEB Detection via Telnet

Binary data 8647.prm...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2015/04/09 12:0 a.m.21 views

FortiWeb 5.x < 5.1.0 XSS

Binary data 8650.prm...

4.3CVSS7.3AI score0.02413EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2015/04/09 12:0 a.m.15 views

FortiWeb 5.x < 5.2.1 Multiple XSS Vulnerabilities

Binary data 8667.prm...

4.3CVSS7.3AI score0.01161EPSS
SaveExploits0References2
Rows per page
Query Builder