Skip to content
Sign in
9.8 Critical

CVE-2021-26114 Multiple improper neutralization of special elements used in an SQL command vulnerabilities in FortiWAN before 4.5.9 may…

Description

Multiple improper neutralization of special elements used in an SQL command vulnerabilities in FortiWAN before 4.5.9 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.

Affected products and versions

Product Affected versions Fixed in
Fortinet FortiWAN Versions not published

Other CVEs of Fortinet FortiWAN

The 6 CVEs of Fortinet FortiWAN →
CVE-2021-26113 A use of a one-way hash with a predictable salt vulnerability [CWE-760] in FortiWAN before 4.5.9 may allow an attacker… 6.2 Medium CVE-2021-32585 An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiWAN before 4.5.9 may allow… 7.2 High CVE-2021-32593 A use of a broken or risky cryptographic algorithm vulnerability [CWE-327] in the Dynamic Tunnel Protocol of FortiWAN… 6.5 Medium CVE-2021-24009 Multiple improper neutralization of special elements used in an OS command vulnerabilities (CWE-78) in the Web GUI of… 7.2 High
Track this CVE