CVE-2021-24016

6.3 mediumEPSS 0.5%

Medium (6.3) in fortinet fortimanager. EPSS 0.5% chance of exploitation in the next 30 days.

An improper neutralization of formula elements in a csv file in Fortinet FortiManager version 6.4.3 and below, 6.2.7 and below allows attacker to execute arbitrary commands via crafted IPv4 field in policy name, when exported as excel file and opened unsafely on the victim host.

Severity

CVSS 3.1

6.3 medium

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 43% of CVEs (scores of 2026-10-31)
CWE: CWE-1236
Published: 2021-09-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortimanager

References

https://fortiguard.com/advisory/FG-IR-20-190
https://fortiguard.com/advisory/FG-IR-20-190

Check your stack JSON