How many Fortinet FortiWeb CVEs are in CISA KEV?

Yes — 4 of Fortinet FortiWeb's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of Fortinet FortiWeb are affected?

368 distinct Fortinet FortiWeb versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Fortinet FortiWeb CVEs?

Fortinet FortiWeb's CVEs most often map to these CWE weakness types: CWE-121 (Stack-based Buffer Overflow), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-23 (Relative Path Traversal), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).

How many critical Fortinet FortiWeb vulnerabilities are there?

Fortinet FortiWeb has 15 critical and 48 high-severity CVEs.

What is the average severity of Fortinet FortiWeb CVEs?

The average CVSS base score across Fortinet FortiWeb's scored CVEs is 7.0.

Fortinet FortiWeb Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Fortinet FortiWeb vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Fortinet FortiWeb Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Fortinet FortiWeb has 127 published CVE records since 2014, of which 4 are in CISA's Known Exploited Vulnerabilities catalog and 5 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Fortinet FortiWeb, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Fortinet FortiWeb's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical15

High48

Medium62

Low2

In CISA’s Known Exploited Vulnerabilities catalog

4 of Fortinet FortiWeb's CVEs are confirmed exploited in the wild.

Public exploits

5 of Fortinet FortiWeb's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Fortinet FortiWeb version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

6.3.01 CVE
6.4.01 CVE
7.0.01 CVE
7.2.01 CVE

Version ranges

6.4.0 <= v <= 6.4.025 CVEs
6.4.1 <= v <= 6.4.123 CVEs
6.4.0 <= v <= 6.4.222 CVEs
6.3.0 <= v <= 6.3.1514 CVEs
7.0.0 <= v <= 7.0.113 CVEs
7.0.0 <= v <= 7.0.1013 CVEs
7.2.0 <= v <= 7.2.1011 CVEs

Common weakness types

The CWE weakness categories most often found in Fortinet FortiWeb CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Fortinet FortiWeb CVEs were published each year.

2015

2016

2017

2018

2019

2020

2021

Other Fortinet products

Browse vulnerabilities for other products by Fortinet.

FortiOS283 CVEs FortiProxy131 CVEs FortiManager119 CVEs FortiAnalyzer95 CVEs forticlient87 CVEs FortiSandbox61 CVEs FortiMail47 CVEs Fortinet FortiOS47 CVEs

Frequently asked questions

Common questions about Fortinet FortiWeb vulnerabilities.

How many CVEs does Fortinet FortiWeb have?: Fortinet FortiWeb has 127 published CVE records since 2014.
How many Fortinet FortiWeb CVEs are in CISA KEV?: Yes — 4 of Fortinet FortiWeb's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for Fortinet FortiWeb vulnerabilities?: Yes — 5 of Fortinet FortiWeb's CVEs have a known public exploit.
Which versions of Fortinet FortiWeb are affected?: 368 distinct Fortinet FortiWeb versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Fortinet FortiWeb CVEs?: Fortinet FortiWeb's CVEs most often map to these CWE weakness types: CWE-121 (Stack-based Buffer Overflow), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-23 (Relative Path Traversal), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).
How many critical Fortinet FortiWeb vulnerabilities are there?: Fortinet FortiWeb has 15 critical and 48 high-severity CVEs.
What is the average severity of Fortinet FortiWeb CVEs?: The average CVSS base score across Fortinet FortiWeb's scored CVEs is 7.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Fortinet FortiWeb vulnerabilities

Monitor new Fortinet FortiWeb vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing