Vulnerabilities (CVE)

Filtered by vendor Fortinet Subscribe
Filtered by product Fortiweb
Total 82 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-46713 1 Fortinet 1 Fortiweb 2024-02-28 N/A 5.3 MEDIUM
An improper output neutralization for logs in Fortinet FortiWeb 6.2.0 - 6.2.8, 6.3.0 - 6.3.23, 7.0.0 - 7.0.9, 7.2.0 - 7.2.5 and 7.4.0 may allow an attacker to forge traffic logs via a crafted URL of the web application.
CVE-2023-34984 1 Fortinet 1 Fortiweb 2024-02-28 N/A 8.8 HIGH
A protection mechanism failure in Fortinet FortiWeb 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4.0 through 6.4.3, 6.3.6 through 6.3.23 allows attacker to execute unauthorized code or commands via specially crafted HTTP requests.