# Fortinet FortiWAN.

Every CVE that names Fortinet FortiWAN among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Fortinet FortiWAN: A relative path traversal vulnerability (CWE-23) in FortiWAN version 4.5.7 and below…](https://agentprime.io/advisories/CVE-2021-26102.md)
  `CVE-2021-26102` · CVE record: Fortinet FortiWAN · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.20 · Not analysed yet · Published 19 Dec 2024 · Tags: CWE-305
- [OS command injection in Fortinet FortiWAN](https://agentprime.io/advisories/CVE-2021-26115.md)
  `CVE-2021-26115` · CVE record: Fortinet FortiWAN · CVSS 7.6 High · Not analysed yet · Published 19 Dec 2024 · Tags: Command injection
- [Path traversal in Fortinet FortiWAN](https://agentprime.io/advisories/CVE-2023-44251.md)
  `CVE-2023-44251` · CVE record: Fortinet FortiWAN · CVSS 8.1 High · Not analysed yet · Published 13 Dec 2023 · Tags: Path traversal
- [Improper authentication in Fortinet FortiWAN](https://agentprime.io/advisories/CVE-2023-44252.md)
  `CVE-2023-44252` · CVE record: Fortinet FortiWAN · CVSS 8.6 High · Not analysed yet · Published 13 Dec 2023 · Tags: Authentication bypass
- [OS command injection in Fortinet FortiWAN](https://agentprime.io/advisories/CVE-2022-33869.md)
  `CVE-2022-33869` · CVE record: Fortinet FortiWAN · CVSS 8.0 High · Not analysed yet · Published 16 Feb 2023 · Tags: Command injection
- [A use of a one-way hash with a predictable salt vulnerability \[CWE-760\] in FortiWAN before 4.5.9 may allow an attacker who has previously come in possession of the password file to potentially guess…](https://agentprime.io/advisories/CVE-2021-26113.md)
  `CVE-2021-26113` · CVE record: Fortinet Fortinet FortiWAN · CVSS 6.2 Medium · Not analysed yet · Published 6 Apr 2022
- [An improper neutralization of input during web page generation vulnerability \[CWE-79\] in FortiWAN before 4.5.9 may allow an attacker to perform a stored cross-site scripting attack via specifically c…](https://agentprime.io/advisories/CVE-2021-32585.md)
  `CVE-2021-32585` · CVE record: Fortinet Fortinet FortiWAN · CVSS 7.2 High · Not analysed yet · Published 6 Apr 2022
- [A use of a broken or risky cryptographic algorithm vulnerability \[CWE-327\] in the Dynamic Tunnel Protocol of FortiWAN before 4.5.9 may allow an unauthenticated remote attacker to decrypt and forge pr…](https://agentprime.io/advisories/CVE-2021-32593.md)
  `CVE-2021-32593` · CVE record: Fortinet Fortinet FortiWAN · CVSS 6.5 Medium · Not analysed yet · Published 6 Apr 2022
- [Multiple improper neutralization of special elements used in an OS command vulnerabilities (CWE-78) in the Web GUI of FortiWAN before 4.5.9 may allow an authenticated attacker to execute arbitrary co…](https://agentprime.io/advisories/CVE-2021-24009.md)
  `CVE-2021-24009` · CVE record: Fortinet Fortinet FortiWAN · CVSS 7.2 High · Not analysed yet · Published 6 Apr 2022
- [Multiple improper neutralization of special elements used in an SQL command vulnerabilities in FortiWAN before 4.5.9 may allow an unauthenticated attacker to execute unauthorized code or commands via…](https://agentprime.io/advisories/CVE-2021-26114.md)
  `CVE-2021-26114` · CVE record: Fortinet Fortinet FortiWAN · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Apr 2022
- [Multiple stack-based buffer overflow vulnerabilities \[CWE-121\] both in network daemons and in the command line interpreter of FortiWAN before 4.5.9 may allow an unauthenticated attacker to potentiall…](https://agentprime.io/advisories/CVE-2021-26112.md)
  `CVE-2021-26112` · CVE record: Fortinet Fortinet FortiWAN · CVSS 8.1 High · Not analysed yet · Published 6 Apr 2022

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=fortinet-fortiwan>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/fortinet-fortiwan/>. Everything for agents: <https://agentprime.io/llms.txt>.