Fortinet FortiWeb 5.9.1
Approved changes feed: RSS · Atom
cpe:2.3:a:fortinet:fortiweb:5.9.1:*:*:*:*:*:*:*
part: a version: 5.9.1 update: *
| Vendor | Fortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947) |
|---|---|
| Product | Fortiweb (9f9ba09f-3c25-5875-8124-5309d16a8616) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-36180 |
vulnerable | 2026-06-08 05:32:49.870060 |
Details available
HIGH (8.1)
Multiple improper neutralization of special elements used in a command vulnerabilities [CWE-77] in FortiWeb management interface 6.4.1 and below, 6.3.15 and below, 6.2.5 and below may allow an authenticated attacker to execute unauthorized code or commands via crafted parameters of HTTP requests.
Published: 2021-12-08T10:46:45.000Z
Updated: 2024-10-25T13:42:36.173Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32591 |
vulnerable | 2026-06-08 05:32:07.627315 |
Details available
MEDIUM (5.3)
A missing cryptographic steps vulnerability in the function that encrypts users' LDAP and RADIUS credentials in FortiSandbox before 4.0.1, FortiWeb before 6.3.12, FortiADC before 6.2.1, FortiMail 7.0.1 and earlier may allow an attacker in possession of the password store to compromise the confidentiality of the encrypted secrets.
Published: 2021-12-08T11:56:06.000Z
Updated: 2024-10-25T13:41:32.379Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.