CVE-2023-34984CWE-693

A protection mechanism failure in Fortinet FortiWeb 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4.0 through 6.4.3, 6.3.6 through 6.3.23 allows attacker to…

High · published September 13, 2023

CVSS v3.1
7.1
EPSS
1%
Percentile
53.8
In the wild
Unconfirmed
What it is

A protection mechanism failure in Fortinet FortiWeb 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4.0 through 6.4.3, 6.3.6 through 6.3.23 allows attacker to execute unauthorized code or commands via specially crafted HTTP requests.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C
CVSS v4.0
Not supplied
EPSS
0.00733 · 53.8th percentile
Weakness
CWE-693 · Protection Mechanism Failure
Published
2023-09-13T12:29Z
EPSS history
Timeline
  • 13 SEP 12:29Z
    A protection mechanism failure in Fortinet FortiWeb 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4.0 through 6.4.3, 6.3.6 through 6.3.23 allows attacker to…
    cvelistv5