Vulnerability Database

289,784

Total vulnerabilities in the database

CVE-2021-36191

A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows attacker to use the device as proxy via crafted GET parameters in requests to error handlers

  • Published: Dec 8, 2021
  • Updated: Apr 14, 2023
  • CVE: CVE-2021-36191
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.4
  • AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CVSS v2:

  • Severity: Low
  • Score: 4.9
  • AV:N/AC:M/Au:S/C:P/I:P/A:N

CWEs:

Software From Fixed in
fortinet / fortiweb 6.4.0 6.4.0.x
fortinet / fortiweb 6.3.0 6.3.15.x
fortinet / fortiweb 6.4.1 6.4.1.x
fortinet / fortiweb 6.1.0 6.1.0.x
fortinet / fortiweb 6.1.1 6.1.1.x
fortinet / fortiweb 6.0.0 6.0.7.x
fortinet / fortiweb 6.1.2 6.1.2.x
fortinet / fortiweb 6.2.0 6.2.6.x