Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
FortinetFortiwlm*

23 matches found

CVE
CVE•added 2024/12/18 1:15 p.m.•97 views

CVE-2023-34990

A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specially crafted web requests.

9.8CVSS7.6AI score0.41496EPSS
CVE
CVE•added 2022/03/01 7:15 p.m.•87 views

CVE-2021-43077

A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.2 and below, version 8.5.2 and below, version 8.4.2 and below, version 8.3.2 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests to the AP...

8.8CVSS8.9AI score0.00695EPSS
CVE
CVE•added 2022/03/01 7:15 p.m.•84 views

CVE-2021-43075

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.2 and below, version 8.5.2 and below, version 8.4.2 and below, version 8.3.2 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests to ...

9CVSS8.9AI score0.016EPSS
CVE
CVE•added 2022/03/02 5:15 p.m.•79 views

CVE-2021-43070

Multiple relative path traversal vulnerabilities [CWE-23] in FortiWLM management interface 8.6.2 and below, 8.5.2 and below, 8.4.2 and below, 8.3.3 and below, 8.2.2 may allow an authenticated attacker to retrieve arbitrary files from the underlying filesystem via specially crafted web requests.

6.5CVSS6.5AI score0.00387EPSS
CVE
CVE•added 2023/11/14 6:15 p.m.•63 views

CVE-2023-34991

A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 and 8.4.0 through 8.4.2 and 8.3.0 through 8.3.2 and 8.2.2 allows attacker to execute unauthorized code or commands via a crafted http reque...

9.8CVSS9.4AI score0.08018EPSS
CVE
CVE•added 2023/10/10 5:15 p.m.•50 views

CVE-2023-34993

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters.

9.8CVSS9.6AI score0.8676EPSS
CVE
CVE•added 2021/11/02 7:15 p.m.•41 views

CVE-2021-36185

A improper neutralization of special elements used in an OS command ('OS Command Injection') in Fortinet FortiWLM version 8.6.1 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests.

8.8CVSS9AI score0.02481EPSS
CVE
CVE•added 2023/11/14 6:15 p.m.•41 views

CVE-2023-42783

A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 and 8.4.2 through 8.4.0 and 8.3.2 through 8.3.0 and 8.2.2 allows attacker to read arbitrary files via crafted http requests.

7.5CVSS7.4AI score0.01165EPSS
CVE
CVE•added 2017/07/22 9:29 p.m.•40 views

CVE-2017-7336

A hard-coded account named 'upgrade' in Fortinet FortiWLM 8.3.0 and lower versions allows a remote attacker to log-in and execute commands with 'upgrade' account privileges.

9.8CVSS9.5AI score0.00942EPSS
CVE
CVE•added 2021/12/08 12:15 p.m.•39 views

CVE-2021-42752

A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWLM version 8.6.1 and below allows attacker to execute malicious javascript code on victim's host via crafted HTTP requests

5.4CVSS5.7AI score0.00262EPSS
CVE
CVE•added 2023/10/10 5:15 p.m.•39 views

CVE-2023-34985

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted HTTP get request parameters.

8.8CVSS8.9AI score0.01478EPSS
CVE
CVE•added 2023/10/10 5:15 p.m.•39 views

CVE-2023-36548

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters.

9.8CVSS9.6AI score0.01407EPSS
CVE
CVE•added 2021/12/08 12:15 p.m.•35 views

CVE-2021-41029

A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWLM version 8.6.1 and below allows attacker to store malicious javascript code in the device and trigger it via crafted HTTP requests

6.4CVSS5.5AI score0.00551EPSS
CVE
CVE•added 2021/12/08 12:15 p.m.•35 views

CVE-2021-42760

A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.1 and below allows attacker to disclose sensitive information from DB tables via crafted requests.

8.8CVSS8.4AI score0.00573EPSS
CVE
CVE•added 2023/10/10 5:15 p.m.•35 views

CVE-2023-36547

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters.

9.8CVSS9.6AI score0.01407EPSS
CVE
CVE•added 2021/11/02 7:15 p.m.•34 views

CVE-2021-36184

A improper neutralization of Special Elements used in an SQL Command ('SQL Injection') in Fortinet FortiWLM version 8.6.1 and below allows attacker to disclosure device, users and database information via crafted HTTP requests.

8.8CVSS6.5AI score0.00418EPSS
CVE
CVE•added 2023/10/10 5:15 p.m.•34 views

CVE-2023-36550

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters.

9.8CVSS9.6AI score0.01407EPSS
CVE
CVE•added 2023/10/10 5:15 p.m.•32 views

CVE-2023-34989

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted HTTP get request parameters.

8.8CVSS8.9AI score0.01478EPSS
CVE
CVE•added 2023/10/10 5:15 p.m.•31 views

CVE-2023-34987

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted HTTP get request parameters.

8.8CVSS8.9AI score0.01478EPSS
CVE
CVE•added 2023/10/10 5:15 p.m.•31 views

CVE-2023-34988

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted HTTP get request parameters.

8.8CVSS8.9AI score0.01478EPSS
CVE
CVE•added 2023/10/10 5:15 p.m.•31 views

CVE-2023-36549

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters.

9.8CVSS9.6AI score0.01944EPSS
CVE
CVE•added 2023/12/13 7:15 a.m.•27 views

CVE-2023-48782

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters

8.8CVSS8.8AI score0.05699EPSS
CVE
CVE•added 2023/10/10 5:15 p.m.•24 views

CVE-2023-34986

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted HTTP get request parameters.

8.8CVSS8.9AI score0.01478EPSS