cvedb.io
CVE-2021-36191
MEDIUM · CVSS 4.1
EPSS exploitation probability: 0%
Published 2021-12-08T13:15:07.787 · Last modified 2026-06-17T03:58:29.837

Summary

A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows attacker to use the device as proxy via crafted GET parameters in requests to error handlers

Affected products

fortinet — fortiweb

Does this affect you?

Add your gear to cvedb and we'll alert you only when fortinet ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.