← Database

CVE-2021-43071

HIGH CVSS: 8.8 Published: 2021-12-09 Modified: 2026-06-17

Description

A heap-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below, version 6.2.6 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests to the LogReport API controller.

Affected Platforms

Fortinet Fortiweb

Weakness Type

CWE-787

References