FortiWeb vulnerabilities

42 known vulnerabilities in FortiWeb from Fortinet. 42 are rated high or critical, and 4 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  FortiWeb: Out-of-bounds Write

  CVE-2022-30306Feb 16, 2023Fortinet

  A stack-based buffer overflow vulnerability [CWE-121] in the CA sign functionality of FortiWeb version 7.0.1 and below, 6.4 all versions, version 6.3.19 and below may allow an authenticated attacker to achieve arbitrary code execution via specifically crafted

• 8.8 High severity

  FortiWeb: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-30303Feb 16, 2023FortinetEPSS 2.51%

  An improper neutralization of special elements used in an os command ('OS Command Injection') [CWE-78] in FortiWeb 7.0.0 through 7.0.1, 6.3.0 through 6.3.19, 6.4 all versions may allow an authenticated attacker to execute arbitrary shell code as `root` user vi