FO
Product
FortiWeb
by Fortinet · last CVE Aug 12, 2026
On CISA KEVExploited in the wild
126
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 16High 49Medium 51Low 2
Watch

Add FortiWeb to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-22636
3.3
0%
Feb 27
An unauthorized configuration download vulnerability in FortiWeb 6.3.6 through 6.3.21, 6.4.0 through 6.4.2 and 7.0.0 through 7.0.4 may allow a local attacker to access…
Affected: 6.3.6 through 6.3.21; 6.4.0 through 6.4.2; 7.0.0 through 7.0.4
CVE-2024-55593
2.7
0%
Jan 14
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWeb versions 6.3.17 through 7.6.1 allows attacker to gain information…
Affected: 6.3.6 before 7.6.2
Showing 2