CVE-2024-23670

8.8 highEPSS 0.4%

High (8.8) in fortinet fortiwebmanager. EPSS 0.4% chance of exploitation in the next 30 days.

An improper authorization in Fortinet FortiWebManager 7.2.0, FortiWebManager 7.0.0 through 7.0.4, FortiWebManager 6.3.0, FortiWebManager 6.2.3 through 6.2.4, FortiWebManager 6.0.2 allows attacker to execute unauthorized code or commands via HTTP requests or CLI.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 38% of CVEs (scores of 2026-10-31)
CWE: CWE-285
Published: 2024-06-03
Modified: 2026-07-08
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortiwebmanager

References

https://fortiguard.fortinet.com/psirt/FG-IR-23-222
https://fortiguard.fortinet.com/psirt/FG-IR-23-222

Check your stack JSON