Recently modified vulnerabilities for "fortinet fortiweb" 5.0.0

Where

AND

Sort:

Fortinet FortiWebBuffer Overflow

Risk 66

Severity

7.2

Buffer Overflow

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an authenticated attacker to achieve arbitrary code execution via specially crafted commands.

1 / 2

Remedy

Please upgrade to FortiFone version 3.0.12 or above Please upgrade to FortiWeb version 7.0.0 or above Please upgrade to FortiWeb version 6.4.2 or above Please upgrade to FortiWeb version 6.3.17 or above Please upgrade to FortiWeb version 6.3.16 or above Please upgrade to FortiWeb version 6.2.7 or above Please upgrade to FortiRecorder version 7.0.0 or above Please upgrade to FortiRecorder version 6.4.3 or above Please upgrade to FortiRecorder version 6.0.11 or above Please upgrade to FortiVoiceEnterprise version 6.4.5 or above Please upgrade to FortiVoiceEnterprise version 6.0.11 or above Please upgrade to FortiMail version 7.2.0 or above Please upgrade to FortiMail version 7.0.3 or above Please upgrade to FortiMail version 6.4.7 or above Please upgrade to FortiMail version 6.2.9 or above Please upgrade to FortiDDoS-F version 6.3.1 or above Please upgrade to FortiDDoS-F version 6.2.3 or above Please upgrade to FortiDDoS-F version 6.1.5 or above Please upgrade to FortiADC version 7.0.1 or above Please upgrade to FortiADC version 6.2.3 or above Please upgrade to FortiADC version 6.1.7 or above Please upgrade to FortiNDR version 7.0.0 or above Please upgrade to FortiDDoS version 5.7.1 or above Please upgrade to FortiDDoS version 5.6.2 or above Please upgrade to FortiDDoS version 5.5.2 or above Please upgrade to FortiDDoS version 5.4.3 or above Please upgrade to FortiDDoS version 5.3.2 or above Please upgrade to FortiDDoS-CM version 5.7.1 or above Please upgrade to FortiDDoS-CM version 5.6.2 or above Please upgrade to FortiDDoS-CM version 5.5.2 or above Please upgrade to FortiDDoS-CM version 5.4.3 or above Please upgrade to FortiDDoS-CM version 5.3.2 or above

First published (updated )

CVE-2021-36193

Fortinet FortiADCBuffer overflow in TFTP client library of CLI

Risk 60

Severity

6.7

Buffer Overflow

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C

A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authenticated local attacker to achieve arbitrary code execution via specially crafted command line arguments.

1 / 2

Source: MITRE

Remedy

Upgrade to FortiOS version 7.0.3 or above Upgrade to FortiOS version 6.4.8 or above Upgrade to FortiOS version 6.2.10 or above Upgrade to FortiOS version 6.0.14 or above Upgrade to FortiDDoS-F version 6.4.2 or above Upgrade to FortiDDoS-F version 6.3.1 or above Upgrade to FortiDDoS-F version 6.2.3 or above Upgrade to FortiDDoS-F version 6.1.5 or above Upgrade to FortiOS-6K7K version 6.4.8 or above Upgrade to FortiOS-6K7K version 6.2.9 or above Upgrade to FortiVoice version 6.4.5 or above Upgrade to FortiVoice version 6.0.11 or above Upgrade to FortiProxy version 7.0.2 or above Upgrade to FortiProxy version 2.0.8 or above Upgrade to FortiRecorder version 7.0.0 or above Upgrade to FortiRecorder version 6.4.3 or above Upgrade to FortiRecorder version 6.0.11 or above Upgrade to upcoming FortiRecorder version 2.7.8 or above Upgrade to FortiPortal version 6.0.11 or above Upgrade to FortiMail version 7.2.0 or above Upgrade to FortiMail version 7.0.3 or above Upgrade to FortiMail version 6.4.7 or above Upgrade to FortiAnalyzer version 7.0.3 or above Upgrade to FortiAnalyzer version 6.4.8 or above Upgrade to FortiNDR version 7.0.0 or above Upgrade to FortiDDoS version 5.6.0 or above Upgrade to FortiDDoS version 5.5.2 or above Upgrade to FortiSwitch version 7.2.0 or above Upgrade to FortiSwitch version 7.0.4 or above Upgrade to FortiSwitch version 6.4.10 or above Upgrade to FortiADC version 7.0.1 or above Upgrade to FortiADC version 6.2.3 or above Upgrade to FortiADC version 6.1.6 or above Upgrade to FortiWeb version 7.0.0 or above Upgrade to FortiWeb version 6.4.2 or above Upgrade to FortiWeb version 6.3.17 or above Upgrade to FortiManager version 7.0.3 or above Upgrade to FortiManager version 6.4.8 or above

First published (updated )

CVE-2021-42757

Fortinet FortiWebXSS

Risk 22

Severity

4.3

XSS

AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in FortiGuard FortiWeb 5.0.x, 5.1.x, and 5.2.x before 5.2.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) user/ldapuser/checkdlg or (2) user/radiususer/checkdlg.

First published (updated )

CVE-2014-4738

Trending

Fortinet FortiWebBuffer Overflow

Remedy

Fortinet FortiADCBuffer overflow in TFTP client library of CLI

Remedy

Fortinet FortiWebXSS

Company

Resources

Contact