VYPR
← All advisories
Medium severity4.2NVD Advisory· Published Dec 8, 2021· Updated Jun 17, 2026

CVE-2021-36195

CVE-2021-36195

Description

Multiple command injection vulnerabilities in the command line interpreter of FortiWeb versions 6.4.1, 6.4.0, 6.3.0 through 6.3.15, 6.2.0 through 6.2.6, and 6.1.0 through 6.1.2 may allow an authenticated attacker to execute arbitrary commands on the underlying system shell via specially crafted command arguments.

Affected products

8
  • Fortinet/Fortiweb8 versions
    cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*range: >=6.2.0,<=6.2.5
    • cpe:2.3:a:fortinet:fortiweb:6.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiweb:6.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiweb:6.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiweb:6.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiweb:6.4.1:*:*:*:*:*:*:*
    • (no CPE)range: 6.4.1, 6.4.0, 6.3.0-6.3.15, 6.2.0-6.2.6, 6.1.0-6.1.2
    • (no CPE)range: FortiWeb 6.4.1, 6.4.0, 6.3.0 through 6.3.15, 6.2.0 through 6.2.6, 6.1.0 through 6.1.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.