Fortinet FortiWeb
3 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2020-29015 | FortiWeb 6.3.0 through 6.3.7 and version before 6.2.4 | A blind SQL injection in the user interface of FortiWeb 6.3.0 through 6.3.7 and version before 6.2.4 may allow an unauthenticated, remote at | CRITICAL 9.8 | 2.6 % | ||
| CVE-2020-29019 | FortiWeb 6.3.0 through 6.3.7 and version before 6.2.4 | A stack-based buffer overflow vulnerability in FortiWeb 6.3.0 through 6.3.7 and version before 6.2.4 may allow a remote, unauthenticated att | MEDIUM 5.3 | 2.1 % | ||
| CVE-2020-6646 | FortiWeb 6.2.2 | An improper neutralization of input vulnerability in FortiWeb allows a remote authenticated attacker to perform a stored cross site scriptin | MEDIUM 5.4 | 0.8 % |