High

DATE	CVE	VULNERABILITY TITLE	RISK
2021-01-14	CVE-2020-29018	Use of Externally-Controlled Format String vulnerability in Fortinet Fortiweb A format string vulnerability in FortiWeb 6.3.0 through 6.3.5 may allow an authenticated, remote attacker to read the content of memory and retrieve sensitive data via the redir parameter. network low complexity fortinet CWE-134	8.8
2016-07-13	CVE-2016-4066	Cross-Site Request Forgery (CSRF) vulnerability in Fortinet Fortiweb Cross-site request forgery (CSRF) vulnerability in Fortinet FortiWeb before 5.5.3 allows remote attackers to hijack the authentication of administrators for requests that change the password via unspecified vectors. network low complexity fortinet CWE-352	8.8