CVE-2021-36187: High severity fortinet fortiweb vulnerability
A uncontrolled resource consumption in Fortinet FortiWeb version 6.4.0, version 6.3.15 and below, 6.2.5 and below allows attacker to cause a denial of service for webserver daemon via crafted HTTP requests
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-36187?
CVE-2021-36187 is a vulnerability in Fortinet FortiWeb version 6.4.0, version 6.3.15 and below, 6.2.5 and below that allows an attacker to cause a denial of service for the webserver daemon through crafted HTTP requests.
What is the severity of CVE-2021-36187?
The severity of CVE-2021-36187 is high with a CVSS score of 7.5.
Which versions of Fortinet FortiWeb are affected by CVE-2021-36187?
Fortinet FortiWeb version 6.4.0, version 6.3.15 and below, 6.2.5 and below are affected by CVE-2021-36187.
How can an attacker exploit CVE-2021-36187?
An attacker can exploit CVE-2021-36187 by sending crafted HTTP requests that cause uncontrolled resource consumption, leading to a denial of service for the webserver daemon.
Is there a fix available for CVE-2021-36187?
It is recommended to update Fortinet FortiWeb to a version that is not affected by CVE-2021-36187. Check the advisory from FortiGuard for more information: https://fortiguard.com/advisory/FG-IR-21-039