FortiWLM vulnerabilities

14 known vulnerabilities in FortiWLM from Fortinet. 14 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

14vulnerabilities

7critical

7high

0exploited

9.2average CVSS score

Latest first

9.8 Critical severity
FortiWLM: Relative Path Traversal
CVE-2023-34990Dec 18, 2024FortinetEPSS 25%
A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specially crafted web requests.
8.8 High severity
FortiWLM: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-48782Dec 13, 2023FortinetEPSS 2.66%
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters
7.5 High severity
FortiWLM: Relative Path Traversal
CVE-2023-42783Nov 14, 2023Fortinet
A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 and 8.4.2 through 8.4.0 and 8.3.2 through 8.3.0 and 8.2.2 allows attacker to read arbitrary files via crafted http requests.
9.8 Critical severity
FortiWLM: Improper Neutralization of Special Elements used in an SQL Command
CVE-2023-34991Nov 14, 2023FortinetEPSS 28.8%
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 and 8.4.0 through 8.4.2 and 8.3.0 through 8.3.2 and 8.2.2 allows attacker to execute unauthorized co
9.8 Critical severity
FortiWLM: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-36550Oct 10, 2023FortinetEPSS 2.49%
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get req
9.8 Critical severity
FortiWLM: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-36549Oct 10, 2023FortinetEPSS 2.49%
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get req
9.8 Critical severity
FortiWLM: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-36548Oct 10, 2023FortinetEPSS 2.49%
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get req
9.8 Critical severity
FortiWLM: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-36547Oct 10, 2023FortinetEPSS 2.49%
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get req
9.8 Critical severity
FortiWLM: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-34993Oct 10, 2023FortinetEPSS 21.3%
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get req
8.8 High severity
FortiWLM: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-34989Oct 10, 2023FortinetEPSS 2.49%
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted HTTP get req
8.8 High severity
FortiWLM: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-34988Oct 10, 2023FortinetEPSS 2.49%
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted HTTP get req
8.8 High severity
FortiWLM: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-34987Oct 10, 2023FortinetEPSS 2.49%
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted HTTP get req
8.8 High severity
FortiWLM: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-34986Oct 10, 2023FortinetEPSS 2.49%
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted HTTP get req
8.8 High severity
FortiWLM: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-34985Oct 10, 2023FortinetEPSS 2.49%
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted HTTP get req