← Database

CVE-2021-36182

HIGH CVSS: 8.8 Published: 2021-09-08 Modified: 2026-06-17

Description

A Improper neutralization of special elements used in a command ('Command Injection') in Fortinet FortiWeb version 6.3.13 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests

Affected Platforms

Fortinet Fortiweb

Weakness Type

CWE-78

References