FO
Product
FortiWLM
23
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 11Medium 4Low 0
Watch
Add FortiWLM to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-34990 | 9.8 | Dec 18 | A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specially crafted… Affected: 8.6.0 through 8.6.5; 8.5.0 through 8.5.4 |
| CVE-2023-34991 | 9.8 | Nov 14 | A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 and 8.4.0 through… Affected: 8.5.0 through 8.5.4; 8.6.0 through 8.6.5; 8.2.2; 8.3.0; 8.3.1; 8.3.2; +3 more |
| CVE-2023-36550 | 9.8 | Oct 10 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows… Affected: 8.5.0 through 8.5.4; 8.6.0 through 8.6.5 |
| CVE-2023-36549 | 9.8 | Oct 10 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows… Affected: 8.5.0 through 8.5.4; 8.6.0 through 8.6.5 |
| CVE-2023-36548 | 9.8 | Oct 10 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows… Affected: 8.5.0 through 8.5.4; 8.6.0 through 8.6.5 |
| CVE-2023-36547 | 9.8 | Oct 10 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows… Affected: 8.5.0 through 8.5.4; 8.6.0 through 8.6.5 |
| CVE-2023-34993 | 9.8 | Oct 10 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows… Affected: 8.5.0 through 8.5.4; 8.6.0 through 8.6.5 |
| CVE-2017-7336 | 9.8 | Jul 22 | A hard-coded account named 'upgrade' in Fortinet FortiWLM 8.3.0 and lower versions allows a remote attacker to log-in and execute commands with 'upgrade' account privileges Affected: through 8.3.0 |
| CVE-2023-48782 | 8.8 | Dec 13 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 allows attacker to execute… Affected: 8.6.0 through 8.6.5 |
| CVE-2023-34989 | 8.8 | Oct 10 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows… Affected: 8.5.0 through 8.5.4; 8.6.0 through 8.6.5 |
| CVE-2023-34988 | 8.8 | Oct 10 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows… Affected: 8.5.0 through 8.5.4; 8.6.0 through 8.6.5 |
| CVE-2023-34987 | 8.8 | Oct 10 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows… Affected: 8.5.0 through 8.5.4; 8.6.0 through 8.6.5 |
| CVE-2023-34986 | 8.8 | Oct 10 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows… Affected: 8.5.0 through 8.5.4; 8.6.0 through 8.6.5 |
| CVE-2023-34985 | 8.8 | Oct 10 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows… Affected: 8.5.0 through 8.5.4; 8.6.0 through 8.6.5 |
| CVE-2021-43077 | 8.8 | Mar 1 | A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.2 and below, version 8.5.2 and below, version 8.4.2 and… Affected: through 8.3.2; 8.4.0 through 8.4.2; 8.5.0 through 8.5.2; 8.6.0 before 8.6.3 |
| CVE-2021-43075 | 8.8 | Mar 1 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.2 and below, version 8.5.2 and below, version 8.4.2… Affected: through 8.3.2; 8.4.0 through 8.4.2; 8.5.0 through 8.5.2; 8.6.0 before 8.6.3 |
| CVE-2021-42760 | 8.8 | Dec 8 | A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.1 and below allows attacker to disclose sensitive… Affected: through 8.6.1 |
| CVE-2021-36185 | 8.8 | Nov 2 | A improper neutralization of special elements used in an OS command ('OS Command Injection') in Fortinet FortiWLM version 8.6.1 and below allows attacker to execute unauthorized… Affected: 8.2.2 through 8.6.1 |
| CVE-2023-42783 | 7.5 | Nov 14 | A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 and 8.4.2 through 8.4.0 and 8.3.2 through 8.3.0 and 8.2.2 allows attacker to… Affected: 8.5.0 through 8.5.4; 8.6.0 through 8.6.6; 8.2.2; 8.3.0; 8.3.1; 8.3.2; +3 more |
| CVE-2021-43070 | 6.5 | Mar 2 | Multiple relative path traversal vulnerabilities [CWE-23] in FortiWLM management interface 8.6.2 and below, 8.5.2 and below, 8.4.2 and below, 8.3.3 and below, 8.2.2 may allow an… Affected: 8.3.0 through 8.3.3; 8.4.0 through 8.4.2; 8.5.0 through 8.5.2; 8.6.0 through 8.6.2; 8.2.2 |
| CVE-2021-36184 | 6.5 | Nov 2 | A improper neutralization of Special Elements used in an SQL Command ('SQL Injection') in Fortinet FortiWLM version 8.6.1 and below allows attacker to disclosure device, users and… Affected: 8.2.2 through 8.6.1 |
| CVE-2021-42752 | 5.4 | Dec 8 | A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWLM version 8.6.1 and below allows attacker to execute malicious javascript… Affected: through 8.6.1 |
| CVE-2021-41029 | 5.4 | Dec 8 | A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWLM version 8.6.1 and below allows attacker to store malicious javascript… Affected: through 8.6.1 |
Showing 23