GCVE - cpe:2.3:a:fortinet:fortinet_fortiwan:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:fortinet_fortiwan:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Fortinet (`2b06c5e0-0a17-54f4-810a-5ef236d51947`)
Product	Fortinet Fortiwan (`005288a6-a7ee-5256-9fc3-18c9ba170b62`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-32593`	vulnerable	2026-06-08 05:32:07.632365	Details available MEDIUM (6.5) A use of a broken or risky cryptographic algorithm vulnerability [CWE-327] in the Dynamic Tunnel Protocol of FortiWAN before 4.5.9 may allow an unauthenticated remote attacker to decrypt and forge protocol communication messages. Published: 2022-04-06T09:15:31.000Z Updated: 2024-10-25T13:33:43.236Z Open on db.gcve.eu Reference links https://fortiguard.com/psirt/FG-IR-21-070	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-32585`	vulnerable	2026-06-08 05:32:07.505104	Details available HIGH (7.2) An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiWAN before 4.5.9 may allow an attacker to perform a stored cross-site scripting attack via specifically crafted HTTP requests. Published: 2022-04-06T16:00:40.000Z Updated: 2024-10-25T13:32:41.907Z Open on db.gcve.eu Reference links https://fortiguard.com/psirt/FG-IR-21-078	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26114`	vulnerable	2026-06-08 05:30:42.003508	Details available CRITICAL (9.8) Multiple improper neutralization of special elements used in an SQL command vulnerabilities in FortiWAN before 4.5.9 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests. Published: 2022-04-06T09:15:21.000Z Updated: 2024-10-25T13:34:04.126Z Open on db.gcve.eu Reference links https://fortiguard.com/psirt/FG-IR-21-062	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26113`	vulnerable	2026-06-08 05:30:42.002917	Details available MEDIUM (6.2) A use of a one-way hash with a predictable salt vulnerability [CWE-760] in FortiWAN before 4.5.9 may allow an attacker who has previously come in possession of the password file to potentially guess passwords therein stored. Published: 2022-04-06T16:00:57.000Z Updated: 2024-10-22T20:58:07.517Z Open on db.gcve.eu Reference links https://fortiguard.com/psirt/FG-IR-21-064	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26112`	vulnerable	2026-06-08 05:30:42.002143	Details available HIGH (8.1) Multiple stack-based buffer overflow vulnerabilities [CWE-121] both in network daemons and in the command line interpreter of FortiWAN before 4.5.9 may allow an unauthenticated attacker to potentially corrupt control data in memory and execute arbitrary code via specifically crafted requests. Published: 2022-04-06T09:15:15.000Z Updated: 2024-10-25T13:34:14.258Z Open on db.gcve.eu Reference links https://fortiguard.com/psirt/FG-IR-21-065	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-24009`	vulnerable	2026-06-08 05:30:03.465202	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.