WID-SEC-W-2025-0533

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Fortinet FortiWeb: Mehrere Schwachstellen

view advisory published 2025-03-11

Ein entfernter Angreifer kann mehrere Schwachstellen in Fortinet FortiWeb ausnutzen, um Sicherheitsvorkehrungen zu umgehen und Daten zu manipulieren.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2024-55594UScritical9.8—
An improper handling of syntactically invalid structure in Fortinet FortiWeb at least vesrions 7.4.0 through 7.4.6 and 7.2.0 through 7.2.10 and 7.0.0 through 7.0.10 allows attacker…
CVE-2024-55597UShigh7.2—
A improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiWeb versions 7.0.0 through 7.6.0 allows attacker to execute unauthorized code or c…
CVE-2023-42784UScritical9.8—
An improper handling of syntactically invalid structure in Fortinet FortiWeb at least verions 7.4.0 through 7.4.6 and 7.2.0 through 7.2.10 and 7.0.0 through 7.0.10 allows attacker…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan