Unrated severityNVD Advisory· Published May 8, 2014· Updated Jun 17, 2026
CVE-2014-3115
CVE-2014-3115
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration console in Fortinet FortiWeb before 5.2.0 allow remote attackers to hijack the authentication of administrators via system/config/adminadd and other unspecified vectors.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*range: <=5.1.4
- cpe:2.3:a:fortinet:fortiweb:5.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:fortinet:fortiweb:5.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:fortinet:fortiweb:5.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:fortinet:fortiweb:5.1.3:*:*:*:*:*:*:*
- (no CPE)range: <5.2.0
Patches
Vulnerability mechanics
References
4- www.fortiguard.com/advisory/FG-IR-14-013/nvdVendor Advisory
- www.kb.cert.org/vuls/id/902790nvdUS Government Resource
- seclists.org/fulldisclosure/2014/May/30nvd
- www.securitytracker.com/id/1030200nvd
News mentions
0No linked articles in our index yet.