CVE-2021-36180 — Fortinet / Fortinet FortiWeb

CVE-2021-36180

Fortinet / Fortinet FortiWeb PUBLISHED

Description (CNA)

Multiple improper neutralization of special elements used in a command vulnerabilities [CWE-77] in FortiWeb management interface 6.4.1 and below, 6.3.15 and below, 6.2.5 and below may allow an authenticated attacker to execute unauthorized code or commands via crafted parameters of HTTP requests.

Affected (CNA)

Vendor / product	Versions
Fortinet / Fortinet FortiWeb	affected FortiWeb 6.4.1 and below, 6.3.15 and below, 6.2.5 and below

CWE

No CWE identifiers supplied.

References

https://fortiguard.com/advisory/FG-IR-21-120

ADP enrichment

CVE

No English description supplied.

https://fortiguard.com/advisory/FG-IR-21-120

CISA-ADP

No English description supplied.

No references supplied.