VULNERABILITY INTELLIGENCE

CVE-2023-34984

CVSS score7.5 HIGH
EPSS probability0.73%
CISA KEVNot currently listed
Published2023-09-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

A protection mechanism failure in Fortinet FortiWeb 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4.0 through 6.4.3, 6.3.6 through 6.3.23 allows attacker to execute unauthorized code or commands via specially crafted HTTP requests.

Weakness classification

  • psirt@fortinet.com: CWE-693
  • nvd@nist.gov: NVD-CWE-Other

Primary references