Fortiweb Security Vulnerabilities and Issues — Fortiweb CVE List

Lucene search

FortinetFortiweb

3 matches found

CVE•added 2020/03/12 10:15 p.m.•59 views

CVE-2019-16156

An Improper Neutralization of Input vulnerability in the Anomaly Detection Parameter Name in Fortinet FortiWeb 6.0.5, 6.2.0, and 6.1.1 may allow a remote unauthenticated attacker to perform a Cross Site Scripting attack (XSS).

6.1CVSS6.1AI score0.01032EPSS

CVE•added 2020/03/13 4:15 p.m.•45 views

CVE-2019-16157

An information exposure vulnerability in Fortinet FortiWeb 6.2.0 CLI and earlier may allow an authenticated user to view sensitive information being logged via diagnose debug commands.

6.5CVSS6.1AI score0.00328EPSS

CVE•added 2020/03/17 1:15 p.m.•40 views

CVE-2020-6646

An improper neutralization of input vulnerability in FortiWeb allows a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the Disclaimer Description of a Replacement Message.

5.4CVSS5AI score0.00227EPSS