← Database

CVE-2021-36194

HIGH CVSS: 8.8 Published: 2021-12-09 Modified: 2026-06-17

Description

Multiple stack-based buffer overflows in the API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow an authenticated attacker to achieve arbitrary code execution via specially crafted requests.

Affected Platforms

Fortinet Fortiweb

Weakness Type

CWE-787

References