Known vulnerabilities in FortiWeb - page 3

Software: FortiWeb
Software CPE: cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*
Total vulnerabilities: 91
Public exploits: 9
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiWeb FortiWeb is affected by 91 known vulnerabilities: 3 critical, 15 high, 32 medium, 41 low Critical High Medium Low

Vulnerabilities (91)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU102602 - Stack-based buffer overflow
CVE-2024-21758
CWE-121 Low
No
No
7.2.8, 7.4.2 14.01.2025 SB2025011441
#VU100464 - Exposure of sensitive information to an unauthorized actor
CVE-2024-36509
CWE-200 Low
No
No
7.4.4, 7.6.1 14.11.2024 SB2024111418
#VU94010 - Improper Certificate Validation
CVE-2024-33509
CWE-295 Medium
No
No
7.2.2 09.07.2024 SB20240709122
#VU91786 - Improper Authorization
CVE-2024-23665
CWE-285 Medium
No
No
7.2.8, 7.4.3 11.06.2024 SB20240611286
#VU89603 - Exposure of sensitive information to an unauthorized actor
CVE-2024-23107
CWE-200 Low
No
No
7.0.9, 7.2.5, 7.4.1 16.05.2024 SB2024051630
#VU84880 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CWE-113 Medium
No
No
7.0.3 29.12.2023 SB2023010354
#VU84879 - Stack-based buffer overflow
CVE-2021-42756
CWE-121 High
No
No
6.0.8, 6.1.3, 6.2.7, 6.3.17, 7.0.0 29.12.2023 SB2023021687
#VU84878 - Session Fixation
CVE-2021-42761
CWE-384 Medium
No
No
5.9.2, 6.0.8, 6.1.3, 6.2.7, 6.3.17, 7.0.0 29.12.2023 SB2023021686
#VU84876 - Stack-based buffer overflow
CVE-2023-25602
CWE-121 Low
No
No
5.9.2, 6.0.8, 6.1.3, 6.2.7, 6.3.18, 7.0.0 29.12.2023 SB2023021685
#VU84875 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-30300
CWE-22 Medium
No
No
6.3.19, 7.0.2 29.12.2023 SB2023021684
#VU84874 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-23778
CWE-22 Low
No
No
7.0.2 29.12.2023 SB2023021683
#VU84873 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-30299
CWE-22 Medium
No
No
6.3.20, 7.0.2 29.12.2023 SB2023021682
#VU84872 - Stack-based buffer overflow
CVE-2023-23781
CWE-121 Low
No
No
6.3.20, 7.0.2 29.12.2023 SB2023021681
#VU84871 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-30303
CWE-78 Medium
No
No
6.3.20, 7.0.2 29.12.2023 SB2023021680
#VU84870 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-23784
CWE-22 Medium
No
No
6.3.21, 7.0.3 29.12.2023 SB2023021679
#VU84869 - Improper Authorization
CVE-2023-22636
CWE-285 Medium
No
No
7.0.5 29.12.2023 SB2023021678
#VU84529 - Improper Output Neutralization for Logs
CVE-2023-46713
CWE-117 Medium
No
No
7.2.6, 7.4.1 18.12.2023 SB2023121849
#VU80836 - Protection Mechanism Failure
CVE-2023-34984
CWE-693 Medium
No
No
7.0.7, 7.2.2 16.09.2023 SB2023091601
#VU77959 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-33305
CWE-835 Low
No
No
7.0.7, 7.2.2 05.07.2023 SB2023070504
SB2024031818
#VU75068 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-43955
CWE-79 Medium
No
No
6.3.22, 7.0.4 13.04.2023 SB2023041322


Showing elements 41 - 60 out of 91