Unrated severityNVD Advisory· Published May 8, 2014· Updated May 6, 2026
CVE-2014-3115
CVE-2014-3115
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration console in Fortinet FortiWeb before 5.2.0 allow remote attackers to hijack the authentication of administrators via system/config/adminadd and other unspecified vectors.
Affected products
5cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*range: <=5.1.4
- cpe:2.3:a:fortinet:fortiweb:5.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:fortinet:fortiweb:5.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:fortinet:fortiweb:5.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:fortinet:fortiweb:5.1.3:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- www.fortiguard.com/advisory/FG-IR-14-013/nvdVendor Advisory
- www.kb.cert.org/vuls/id/902790nvdUS Government Resource
- seclists.org/fulldisclosure/2014/May/30nvd
- www.securitytracker.com/id/1030200nvd
News mentions
0No linked articles in our index yet.