Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:fortiweb:6.3.0:*:*:*:*:*:*:*

part: a version: 6.3.0 update: *

VendorFortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947)
ProductFortiweb (9f9ba09f-3c25-5875-8124-5309d16a8616)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-36193 vulnerable 2026-06-08 05:32:50.042090 Details available
MEDIUM (6.3)
Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an authenticated attacker to achieve arbitrary code execution via specially crafted commands.
Published: 2022-02-02T11:19:47.000Z
Updated: 2026-01-13T16:32:40.255Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6646 vulnerable 2026-06-08 05:26:45.594716 Details available
An improper neutralization of input vulnerability in FortiWeb allows a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the Disclaimer Description of a Replacement Message.
Published: 2020-03-17T12:49:51.000Z
Updated: 2024-10-25T14:02:22.816Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.