VULNERABILITY INTELLIGENCE

CVE-2021-36174

CVSS score4.3 MEDIUM
EPSS probability0.78%
CISA KEVNot currently listed
Published2021-11-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Description

A memory allocation with excessive size value vulnerability in the license verification function of FortiPortal before 6.0.6 may allow an attacker to perform a denial of service attack via specially crafted license blobs.

Weakness classification

  • nvd@nist.gov: CWE-770

Primary references