← Database

CVE-2021-41017

HIGH CVSS: 8.8 Published: 2021-12-08 Modified: 2026-06-17

Description

Multiple heap-based buffer overflow vulnerabilities in some web API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow a remote authenticated attacker to execute arbitrary code or commands via specifically crafted HTTP requests.

Affected Platforms

Fortinet Fortiweb

Weakness Type

CWE-787

References