GCVE - cpe:2.3:a:fortinet:fortiweb:6.1.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:fortiweb:6.1.1:*:*:*:*:*:*:*

part: a version: 6.1.1 update: *

Vendor	Fortinet (`2b06c5e0-0a17-54f4-810a-5ef236d51947`)
Product	Fortiweb (`9f9ba09f-3c25-5875-8124-5309d16a8616`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-41025`	vulnerable	2026-06-08 05:35:19.504229	Details available HIGH (7.3) Multiple vulnerabilities in the authentication mechanism of confd in FortiWeb versions 6.4.1, 6.4.0, 6.3.0 through 6.3.15, 6.2.0 through 6.2.6, 6.1.0 through 6.1.2, 6.0.0 thorugh 6.0.7, including an instance of concurrent execution using shared resource with improper synchronization and one of authentication bypass by capture-replay, may allow a remote unauthenticated attacker to circumvent the authentication process and authenticate as a legitimate cluster peer. Published: 2021-12-08T18:46:00.000Z Updated: 2024-10-25T13:38:26.805Z Open on db.gcve.eu Reference links https://fortiguard.com/advisory/FG-IR-21-130	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-41014`	vulnerable	2026-06-08 05:35:19.474125	Details available HIGH (7.5) A uncontrolled resource consumption in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows an unauthenticated attacker to make the httpsd daemon unresponsive via huge HTTP packets Published: 2021-12-08T13:06:15.000Z Updated: 2024-10-25T13:39:55.287Z Open on db.gcve.eu Reference links https://fortiguard.com/advisory/FG-IR-21-131	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-36195`	vulnerable	2026-06-08 05:32:50.072590	Details available MEDIUM (4.2) Multiple command injection vulnerabilities in the command line interpreter of FortiWeb versions 6.4.1, 6.4.0, 6.3.0 through 6.3.15, 6.2.0 through 6.2.6, and 6.1.0 through 6.1.2 may allow an authenticated attacker to execute arbitrary commands on the underlying system shell via specially crafted command arguments. Published: 2021-12-08T18:14:55.000Z Updated: 2024-10-25T13:38:48.813Z Open on db.gcve.eu Reference links https://fortiguard.com/advisory/FG-IR-21-157	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-36191`	vulnerable	2026-06-08 05:32:49.889018	Details available MEDIUM (4.1) A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows attacker to use the device as proxy via crafted GET parameters in requests to error handlers Published: 2021-12-08T13:03:35.000Z Updated: 2024-10-25T13:40:05.947Z Open on db.gcve.eu Reference links https://fortiguard.com/advisory/FG-IR-21-133	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-36190`	vulnerable	2026-06-08 05:32:49.886714	Details available MEDIUM (5.5) A unintended proxy or intermediary ('confused deputy') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows an unauthenticated attacker to access protected hosts via crafted HTTP requests. Published: 2021-12-08T13:11:05.000Z Updated: 2024-10-25T13:39:43.483Z Open on db.gcve.eu Reference links https://fortiguard.com/advisory/FG-IR-21-123	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-36180`	vulnerable	2026-06-08 05:32:49.871604	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.