cvedb.io
CVE-2021-36194
HIGH · CVSS 8.8
EPSS exploitation probability: 0%
Published 2021-12-09T09:15:07.020 · Last modified 2026-06-17T03:58:30.347

Summary

Multiple stack-based buffer overflows in the API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow an authenticated attacker to achieve arbitrary code execution via specially crafted requests.

Affected products

fortinet — fortiweb

Does this affect you?

Add your gear to cvedb and we'll alert you only when fortinet ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.