Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
fortinet fortiweb vulnerabilities and exploits
(subscribe to this query)
383
VMScore
CVE-2014-8619
Cross-site scripting (XSS) vulnerability in the autolearn configuration page in Fortinet FortiWeb 5.1.2 up to and including 5.3.4 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Fortinet Fortiweb 5.2.2
Fortinet Fortiweb 5.2.3
Fortinet Fortiweb 5.1.2
Fortinet Fortiweb 5.2.4
Fortinet Fortiweb 5.3.0
Fortinet Fortiweb 5.2.0
Fortinet Fortiweb 5.2.1
Fortinet Fortiweb 5.3.3
Fortinet Fortiweb 5.3.4
Fortinet Fortiweb 5.1.3
Fortinet Fortiweb 5.1.4
Fortinet Fortiweb 5.3.1
Fortinet Fortiweb 5.3.2
383
VMScore
CVE-2014-4738
Multiple cross-site scripting (XSS) vulnerabilities in FortiGuard FortiWeb 5.0.x, 5.1.x, and 5.2.x prior to 5.2.1 allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors to (1) user/ldap_user/check_dlg or (2) user/radius_user/check_dlg.
Fortinet Fortiweb 5.0.2
Fortinet Fortiweb 5.0.3
Fortinet Fortiweb 5.1.1
Fortinet Fortiweb 5.1.2
Fortinet Fortiweb 5.0.4
Fortinet Fortiweb 5.0.0
Fortinet Fortiweb 5.1.0
Fortinet Fortiweb 5.2.0
Fortinet Fortiweb 5.1.3
Fortinet Fortiweb 5.1.4
383
VMScore
CVE-2014-1955
Cross-site scripting (XSS) vulnerability in FortiGuard FortiWeb prior to 5.0.3 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Fortinet Fortiweb
383
VMScore
CVE-2013-7181
Cross-site scripting (XSS) vulnerability in user/ldap_user/add in Fortinet FortiOS 5.0.3 allows remote malicious users to inject arbitrary web script or HTML via the filter parameter.
Fortinet Fortiweb 5.0.3
356
VMScore
CVE-2021-41026
A relative path traversal in FortiWeb versions 6.4.1, 6.4.0, and 6.3.0 up to and including 6.3.15 may allow an authenticated malicious user to retrieve arbitrary files from the underlying filesystem via specially crafted web requests.
Fortinet Fortiweb
356
VMScore
CVE-2020-15942
An information disclosure vulnerability in Web Vulnerability Scan profile of Fortinet's FortiWeb version 6.2.x below 6.2.4 and version 6.3.x below 6.3.5 may allow a remote authenticated malicious user to read the password used by the FortiWeb scanner to access the device def...
Fortinet Fortiweb
356
VMScore
CVE-2019-16157
An information exposure vulnerability in Fortinet FortiWeb 6.2.0 CLI and previous versions may allow an authenticated user to view sensitive information being logged via diagnose debug commands.
Fortinet Fortiweb
356
VMScore
CVE-2017-7737
An information disclosure vulnerability in Fortinet FortiWeb 5.8.2 and below versions allows logged-in admin user to view SNMPv3 user password in cleartext in webui via the HTML source code.
Fortinet Fortiweb
356
VMScore
CVE-2016-5092
Directory traversal vulnerability in Fortinet FortiWeb prior to 5.5.3 allows remote authenticated administrators with read and write privileges to read arbitrary files by leveraging the autolearn feature.
Fortinet Fortiweb
312
VMScore
CVE-2021-36175
An improper neutralization of input vulnerability [CWE-79] in FortiWebManager versions 6.2.3 and below, 6.0.2 and below may allow a remote authenticated malicious user to inject malicious script/tags via the name/description/comments parameter of various sections of the device.
Fortinet Fortiweb
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
authentication bypass
CVE-2024-30043
camera
CVE-2023-40404
CVE-2024-2793
client side
CVE-2024-4469
CVE-2024-3565
CVE-2024-29825
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
NEXT »