GCVE - cpe:2.3:a:fortinet:fortiweb:6.1.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:fortiweb:6.1.0:*:*:*:*:*:*:*

part: a version: 6.1.0 update: *

Vendor	Fortinet (`2b06c5e0-0a17-54f4-810a-5ef236d51947`)
Product	Fortiweb (`9f9ba09f-3c25-5875-8124-5309d16a8616`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-41025`	vulnerable	2026-06-08 05:35:19.504206	Details available HIGH (7.3) Multiple vulnerabilities in the authentication mechanism of confd in FortiWeb versions 6.4.1, 6.4.0, 6.3.0 through 6.3.15, 6.2.0 through 6.2.6, 6.1.0 through 6.1.2, 6.0.0 thorugh 6.0.7, including an instance of concurrent execution using shared resource with improper synchronization and one of authentication bypass by capture-replay, may allow a remote unauthenticated attacker to circumvent the authentication process and authenticate as a legitimate cluster peer. Published: 2021-12-08T18:46:00.000Z Updated: 2024-10-25T13:38:26.805Z Open on db.gcve.eu Reference links https://fortiguard.com/advisory/FG-IR-21-130	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-41014`	vulnerable	2026-06-08 05:35:19.473379	Details available HIGH (7.5) A uncontrolled resource consumption in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows an unauthenticated attacker to make the httpsd daemon unresponsive via huge HTTP packets Published: 2021-12-08T13:06:15.000Z Updated: 2024-10-25T13:39:55.287Z Open on db.gcve.eu Reference links https://fortiguard.com/advisory/FG-IR-21-131	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-36195`	vulnerable	2026-06-08 05:32:50.072567	Details available MEDIUM (4.2) Multiple command injection vulnerabilities in the command line interpreter of FortiWeb versions 6.4.1, 6.4.0, 6.3.0 through 6.3.15, 6.2.0 through 6.2.6, and 6.1.0 through 6.1.2 may allow an authenticated attacker to execute arbitrary commands on the underlying system shell via specially crafted command arguments. Published: 2021-12-08T18:14:55.000Z Updated: 2024-10-25T13:38:48.813Z Open on db.gcve.eu Reference links https://fortiguard.com/advisory/FG-IR-21-157	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-36191`	vulnerable	2026-06-08 05:32:49.888897	Details available MEDIUM (4.1) A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows attacker to use the device as proxy via crafted GET parameters in requests to error handlers Published: 2021-12-08T13:03:35.000Z Updated: 2024-10-25T13:40:05.947Z Open on db.gcve.eu Reference links https://fortiguard.com/advisory/FG-IR-21-133	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-36190`	vulnerable	2026-06-08 05:32:49.886599	Details available MEDIUM (5.5) A unintended proxy or intermediary ('confused deputy') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows an unauthenticated attacker to access protected hosts via crafted HTTP requests. Published: 2021-12-08T13:11:05.000Z Updated: 2024-10-25T13:39:43.483Z Open on db.gcve.eu Reference links https://fortiguard.com/advisory/FG-IR-21-123	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-36180`	vulnerable	2026-06-08 05:32:49.871076	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.