Multiple improper neutralization of special elements used in a command vulnerabilities [CWE-77] in FortiWeb management interface 6.4.1 and below, 6.3.15 and below, 6.2.5 and below may allow an authenticated malicious user to execute unauthorized code or commands via crafted parameters of HTTP requests.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
fortinet fortiweb 6.4.0 |
||
fortinet fortiweb |
||
fortinet fortiweb 6.4.1 |
||
fortinet fortiweb 5.9.0 |
||
fortinet fortiweb 5.9.1 |
||
fortinet fortiweb 6.1.0 |
||
fortinet fortiweb 6.1.1 |
Vulmon