Description (CNA)
Multiple heap-based buffer overflow vulnerabilities in some web API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow a remote authenticated attacker to execute arbitrary code or commands via specifically crafted HTTP requests.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Fortinet / Fortinet FortiWeb | affected FortiWeb 6.4.1, 6.4.0, 6.3.0 through 6.3.15 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.