Fortinet: >> Fortiweb >> 7.4.6 Security Vulnerabilities
An improper handling of syntactically invalid structure in Fortinet FortiWeb at least verions 7.4.0 through 7.4.6 and 7.2.0 through 7.2.10 and 7.0.0 through 7.0.10 allows attacker to execute unauthorized code or commands via HTTP/S crafted requests.
CVSS Score
5.6
EPSS Score
0.001
Published
2025-03-11
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWeb versions 6.3.17 through 7.6.1 allows attacker to gain information disclosure via crafted SQL queries
CVSS Score
2.7
EPSS Score
0.001
Published
2025-01-14
Page 2