Lucene search

K
fortinetFortiGuard LabsFG-IR-21-160
HistoryDec 07, 2021 - 12:00 a.m.

FortiWeb - Heap-based buffer overflows in API controller

2021-12-0700:00:00
FortiGuard Labs
www.fortiguard.com
7
fortiweb
buffer overflow
api controller
cwe-122
web
remote attacker
http requests

EPSS

0.001

Percentile

50.9%

Multiple heap-based buffer overflow vulnerabilities [CWE-122] in web API controllers of FortiWeb may allow a remote authenticated attacker to execute arbitrary code or commands via specifically crafted HTTP requests.

EPSS

0.001

Percentile

50.9%

Related for FG-IR-21-160