CVE-2021-36180
08.12.2021, 11:15
Multiple improper neutralization of special elements used in a command vulnerabilities [CWE-77] in FortiWeb management interface 6.4.1 and below, 6.3.15 and below, 6.2.5 and below may allow an authenticated attacker to execute unauthorized code or commands via crafted parameters of HTTP requests.
| Vendor | Product | Version |
|---|---|---|
| fortinet | fortiweb | 5.8.0 ≤ 𝑥 ≤ 5.8.6 |
| fortinet | fortiweb | 6.0.0 ≤ 𝑥 ≤ 6.0.7 |
| fortinet | fortiweb | 6.2.0 ≤ 𝑥 ≤ 6.2.5 |
| fortinet | fortiweb | 6.3.0 ≤ 𝑥 ≤ 6.3.15 |
| fortinet | fortiweb | 5.9.0 |
| fortinet | fortiweb | 5.9.1 |
| fortinet | fortiweb | 6.1.0 |
| fortinet | fortiweb | 6.1.1 |
| fortinet | fortiweb | 6.4.0 |
| fortinet | fortiweb | 6.4.1 |
𝑥
= Vulnerable software versions