Fortinet Fortinet FortiWAN
6 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2021-26113 | FortiWAN before 4.5.9 | A use of a one-way hash with a predictable salt vulnerability [CWE-760] in FortiWAN before 4.5.9 may allow an attacker who has previously co | HIGH 7.5 | 0.4 % | ||
| CVE-2021-32585 | FortiWAN before 4.5.9 | An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiWAN before 4.5.9 may allow an attacker to perf | HIGH 7.2 | 0.7 % | ||
| CVE-2021-32593 | FortiWAN before 4.5.9 | A use of a broken or risky cryptographic algorithm vulnerability [CWE-327] in the Dynamic Tunnel Protocol of FortiWAN before 4.5.9 may allow | MEDIUM 6.5 | 0.6 % | ||
| CVE-2021-24009 | FortiWAN before 4.5.9 | Multiple improper neutralization of special elements used in an OS command vulnerabilities (CWE-78) in the Web GUI of FortiWAN before 4.5.9 | HIGH 8.8 | 1.5 % | ||
| CVE-2021-26114 | FortiWAN before 4.5.9 | Multiple improper neutralization of special elements used in an SQL command vulnerabilities in FortiWAN before 4.5.9 may allow an unauthenti | CRITICAL 9.8 | 1.6 % | ||
| CVE-2021-26112 | FortiWAN before 4.5.9 | Multiple stack-based buffer overflow vulnerabilities [CWE-121] both in network daemons and in the command line interpreter of FortiWAN befor | CRITICAL 9.8 | 1.7 % |