Vulnerability Database

289,784

Total vulnerabilities in the database

CVE-2021-36195

Multiple command injection vulnerabilities in the command line interpreter of FortiWeb versions 6.4.1, 6.4.0, 6.3.0 through 6.3.15, 6.2.0 through 6.2.6, and 6.1.0 through 6.1.2 may allow an authenticated attacker to execute arbitrary commands on the underlying system shell via specially crafted command arguments.

  • Published: Dec 8, 2021
  • Updated: Apr 14, 2023
  • CVE: CVE-2021-36195
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 8.8
  • AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: High
  • Score: 9
  • AV:N/AC:L/Au:S/C:C/I:C/A:C

CWEs:

OWASP TOP 10:

Software From Fixed in
fortinet / fortiweb 6.4.0 6.4.0.x
fortinet / fortiweb 6.3.0 6.3.15.x
fortinet / fortiweb 6.2.0 6.2.5.x
fortinet / fortiweb 6.4.1 6.4.1.x
fortinet / fortiweb 6.1.0 6.1.0.x
fortinet / fortiweb 6.1.1 6.1.1.x
fortinet / fortiweb 6.1.2 6.1.2.x