Vulnerability Database

311,379

Total vulnerabilities in the database

CVE-2021-36195

Multiple command injection vulnerabilities in the command line interpreter of FortiWeb versions 6.4.1, 6.4.0, 6.3.0 through 6.3.15, 6.2.0 through 6.2.6, and 6.1.0 through 6.1.2 may allow an authenticated attacker to execute arbitrary commands on the underlying system shell via specially crafted command arguments.

  • Published: Dec 8, 2021
  • Updated: Nov 16, 2025
  • CVE: CVE-2021-36195
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 4.2
  • AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

CVSS v2:

  • Severity: High
  • Score: 9
  • AV:N/AC:L/Au:S/C:C/I:C/A:C

CWEs:

OWASP TOP 10:

Software From Fixed in
fortinet / fortiweb 6.4.0 6.4.0.x
fortinet / fortiweb 6.3.0 6.3.15.x
fortinet / fortiweb 6.2.0 6.2.5.x
fortinet / fortiweb 6.4.1 6.4.1.x
fortinet / fortiweb 6.1.0 6.1.0.x
fortinet / fortiweb 6.1.1 6.1.1.x
fortinet / fortiweb 6.1.2 6.1.2.x