Lucene search
FortiGuard LabsFG-IR-21-047HistorySep 07, 2021 - 12:00 a.m.
FortiWeb - OS Command Injection because of missing input parameter sanitization
2021-09-0700:00:00
FortiGuard Labs
www.fortiguard.com
10
fortiweb
command injection
missing input parameter
http requests
cwe-89
EPSS
0.001
Percentile
48.5%
Multiple improper neutralization of special elements vulnerabilities [CWE-89] used in a command in FortiWeb may allow an authenticated attacker to execute unauthorized code or commands via crafted parameters of HTTP requests.
Related
prion
prion
Command injection
2021-09-08 11:15:00
cnvd
cnvd
Fortinet FortiWeb Buffer Overflow Vulnerability
2021-09-09 00:00:00
nvd
nvd
CVE-2021-36182
2021-09-08 11:15:07
cvelist
cvelist
CVE-2021-36182
2021-09-08 10:20:57
cve
cve
CVE-2021-36182
2021-09-08 11:15:07