Lucene search
FortinetCVELIST:CVE-2021-36182HistorySep 08, 2021 - 10:20 a.m.
CVE-2021-36182
2021-09-0810:20:57
fortinet
www.cve.org
4
fortinet fortiweb
command injection
unauthorized code
crafted http requests
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RC:C
AI Score
9.1
Confidence
High
EPSS
0.001
Percentile
48.5%
A Improper neutralization of special elements used in a command (‘Command Injection’) in Fortinet FortiWeb version 6.3.13 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests
CNA Affected
[
{
"product": "Fortinet FortiWeb",
"vendor": "Fortinet",
"versions": [
{
"status": "affected",
"version": "FortiWeb 6.3.13, 6.3.12, 6.3.11, 6.3.10, 6.3.9, 6.3.8, 6.3.7, 6.3.6, 6.3.5, 6.3.4, 6.3.3, 6.3.2, 6.3.1, 6.3.0"
}
]
}
]References
Related
prion
prion
Command injection
2021-09-08 11:15:00
cnvd
cnvd
Fortinet FortiWeb Buffer Overflow Vulnerability
2021-09-09 00:00:00
nvd
nvd
CVE-2021-36182
2021-09-08 11:15:07
fortinet
fortinet
cve
cve
CVE-2021-36182
2021-09-08 11:15:07
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RC:C
AI Score
9.1
Confidence
High
EPSS
0.001
Percentile
48.5%
Related for CVELIST:CVE-2021-36182