Known vulnerabilities in FortiWLM

Vendor: Fortinet, Inc
Software: FortiWLM
Software CPE: cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*
Website: https://www.fortinet.com/
Total vulnerabilities: 15
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiWLM FortiWLM is affected by 15 known vulnerabilities: 1 critical, 3 high, 10 medium, 1 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101830 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-34990		 CWE-22 High
No
No
 8.5.5, 8.6.6 18.12.2024 SB2024121832
#VU84857 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-48782		 CWE-78 Medium
No
No
 8.6.6 29.12.2023 SB2023122905
#VU83276 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-34991		 CWE-89 High
No
No
 8.5.5, 8.6.6 20.11.2023 SB2023112017
#VU83275 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-42783		 CWE-22 Medium
No
No
 8.5.5, 8.6.6 20.11.2023 SB2023112017
#VU81966 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-34989		 CWE-78 Medium
No
No
 8.5.5, 8.6.6 12.10.2023 SB2023101277
#VU81965 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-34993		 CWE-78 High
No
No
 8.5.5, 8.6.6 12.10.2023 SB2023101277
#VU61982 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-43070		 CWE-22 Medium
No
No
 8.6.3 07.04.2022 SB2022040714
#VU60937 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-43077		 CWE-89 Medium
No
No
 8.5.3, 8.6.3 01.03.2022 SB2022030128
#VU60936 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-43075		 CWE-78 Medium
No
No
 8.5.3, 8.6.3 01.03.2022 SB2022030128
#VU58811 - Use of Hard-coded Credentials
CVE-2017-7336		 CWE-798 Critical
No
No
 8.3.1 09.12.2021 SB2017072202
#VU58810 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-36185		 CWE-78 Medium
No
No
 8.6.2 09.12.2021 SB2021120918
#VU58809 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-36184		 CWE-89 Medium
No
No
 8.6.2 09.12.2021 SB2021120918
#VU58636 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41029		 CWE-79 Low
No
No
 8.6.2 07.12.2021 SB2021120722
#VU58635 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-42760		 CWE-89 Medium
No
No
 8.6.2 07.12.2021 SB2021120722
#VU58634 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-42752		 CWE-79 Medium
No
No
 8.6.2 07.12.2021 SB2021120722