CVE-2023-34984

8.8 highEPSS 0.7%

High (8.8) in fortinet fortiweb. EPSS 0.7% chance of exploitation in the next 30 days.

A protection mechanism failure in Fortinet FortiWeb 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4.0 through 6.4.3, 6.3.6 through 6.3.23 allows attacker to execute unauthorized code or commands via specially crafted HTTP requests.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE: CWE-693
Published: 2023-09-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortiweb

References

https://fortiguard.com/psirt/FG-IR-23-068
https://fortiguard.com/psirt/FG-IR-23-068

Check your stack JSON