Fortinet Fortiwlm vulnerabilities

23 CVEs affecting Fortinet Fortiwlm, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-34990, published 2024-12-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-34991, published 2023-11-14. Critical severity, CVSS 9.8. EPSS: 28.8% chance of exploitation in the next 30 days. A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 and 8.4.0 through 8.4.2 and 8.3.0…
CVE-2023-34990, published 2024-12-18. Critical severity, CVSS 9.8. EPSS: 24.8% chance of exploitation in the next 30 days. A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specially crafted web requests.
CVE-2023-34993, published 2023-10-10. Critical severity, CVSS 9.8. EPSS: 21.3% chance of exploitation in the next 30 days. A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute…
CVE-2023-48782, published 2023-12-13. High severity, CVSS 8.8. EPSS: 2.7% chance of exploitation in the next 30 days. A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 allows attacker to execute unauthorized code or commands…
CVE-2023-36549, published 2023-10-10. Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days. A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute…
CVE-2023-36550, published 2023-10-10. Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days. A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute…
CVE-2023-36548, published 2023-10-10. Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days. A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute…
CVE-2023-36547, published 2023-10-10. Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days. A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute…
CVE-2023-34989, published 2023-10-10. High severity, CVSS 8.8. EPSS: 2.5% chance of exploitation in the next 30 days. A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute…
CVE-2023-34988, published 2023-10-10. High severity, CVSS 8.8. EPSS: 2.5% chance of exploitation in the next 30 days. A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute…

Latest

CVE-2023-42783, published 2023-11-14. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 and 8.4.2 through 8.4.0 and 8.3.2 through 8.3.0 and 8.2.2 allows attacker to read arbitrary files…