Known vulnerabilities in FortiWeb - page 5

Software: FortiWeb
Software CPE: cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*
Total vulnerabilities: 89
Public exploits: 9
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiWeb FortiWeb is affected by 89 known vulnerabilities: 3 critical, 14 high, 31 medium, 41 low Critical High Medium Low

Vulnerabilities (89)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU53715 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-22123
CWE-78 Medium
Available
No
6.2.4, 6.3.8, 6.2.5, 6.3.15, 6.4.1 01.06.2021 SB2021060119
SB2021081913
#VU51942 - Cleartext Storage of Sensitive Information
CVE-2020-15942
CWE-312 Medium
No
No
6.2.4, 6.3.5 06.04.2021 SB2021040618
#VU50301 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-22122
CWE-79 Medium
No
No
6.2.4, 6.3.8 03.02.2021 SB2021020334
#VU49282 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-29015
CWE-89 High
No
No
6.2.4, 6.3.9 05.01.2021 SB2021010515
#VU49281 - Stack-based buffer overflow
CVE-2020-29016
CWE-121 High
No
No
6.2.4, 6.3.6 05.01.2021 SB2021010513
#VU49280 - Stack-based buffer overflow
CVE-2020-29019
CWE-121 Medium
No
No
6.2.4 05.01.2021 SB2021010514
#VU49279 - Use of Externally-Controlled Format String
CVE-2020-29018
CWE-134 Medium
No
No
6.3.6 05.01.2021 SB2021010512
#VU18787 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-5590
CWE-79 Medium
No
No
6.0.3, 6.1.1 13.06.2019 SB2019061301
#VU9404 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-7736
CWE-79 Low
No
No
- 22.11.2017 SB2017112301


Showing elements 81 - 100 out of 89