| Package | Affected versions | Patched versions |
|---|---|---|
| fortiweb | ≥ 7.4.1, < 7.4.9≥ 7.6.0, < 7.6.4 | 7.4.97.6.4 |
A improper neutralization of special elements used in an os command ('os command injection') vulnerability [CWE-78] in Fortinet FortiWeb CLI version 7.6.0 through 7.6.3 and before 7.4.8 allows a privileged attacker to execute arbitrary code or command via crafted CLI commands.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free