Summary
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Fortinet FortiWeb ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Code auszuführen oder einen Denial of Service zu verursachen.
Product
FortiWeb ist eine Web Application Firewall von Fortinet.
Vulnerabilities 6
-
High 7.3
An Improper Control of Interaction Frequency vulnerability [CWE-799] vulnerability in Fortinet FortiWeb 8.0.0 through 8…
-
Medium 6.7
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet …
-
Medium 5.9
A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb …
-
Medium 5.9
A stack-based buffer overflow vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, For…
-
Medium 5.0
An authentication bypass by spoofing vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through 7.4…
-
Low 2.5
A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6…
Revision history
-
#1
Initiale Fassung
References
-
FortiGuard PSIRT Advisory FG-IR-26-097 vom 2026-03-10
https://www.fortiguard.com/psirt/FG-IR-26-097
-
FortiGuard PSIRT Advisory FG-IR-26-088 vom 2026-03-10
https://www.fortiguard.com/psirt/FG-IR-26-088
-
FortiGuard PSIRT Advisory FG-IR-26-082 vom 2026-03-10
https://www.fortiguard.com/psirt/FG-IR-26-082
-
FortiGuard PSIRT Advisory FG-IR-26-089 vom 2026-03-10
https://www.fortiguard.com/psirt/FG-IR-26-089
-
FortiGuard PSIRT Advisory FG-IR-26-093 vom 2026-03-10
https://www.fortiguard.com/psirt/FG-IR-26-093
-
FortiGuard PSIRT Advisory FG-IR-26-087 vom 2026-03-10
https://fortiguard.fortinet.com/psirt/FG-IR-26-087