{"api_version":"v1","generated_at":"2026-10-08T11:20:00+00:00","product":{"cve_count":27,"evidence_gap_note":"This CVE identity is linked to an existing Lifecycle product history.","id":"security:cve-fortinet-fortinet-fortiweb-c9b00a5a22c4","lifecycle_state":"covered","linked_lifecycle_url":"https://lifecycle.blacktree.nl/targets/fortiweb","name":"Fortinet FortiWeb","next_cursor":null,"observations":[{"affected":"FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15","affected_versions_present":true,"cve_id":"CVE-2021-41026","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-41026","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-10-22T20:58:17.694Z","patch_url":"","primary_source":"","published":"2022-04-06T16:00:26.000Z"},{"affected":"FortiWeb 6.4.1, 6.4.0, 6.3.16, 6.3.15, 6.3.14, 6.3.13, 6.3.12, 6.3.11, 6.3.10, 6.3.9, 6.3.8, 6.3.7, 6.3.6, 6.3.5, 6.3.4, 6.3.3, 6.3.2, 6.3.1, 6.3.0, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0","affected_versions_present":true,"cve_id":"CVE-2021-43071","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-43071","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-10-25T13:37:23.254Z","patch_url":"https://fortiguard.com/advisory/FG-IR-21-188","primary_source":"","published":"2021-12-09T09:18:03.000Z"},{"affected":"FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15","affected_versions_present":true,"cve_id":"CVE-2021-36194","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-36194","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-10-25T13:38:05.532Z","patch_url":"https://fortiguard.com/advisory/FG-IR-21-152","primary_source":"","published":"2021-12-09T08:46:46.000Z"},{"affected":"FortiWeb 6.4.1, 6.4.0, 6.3.0 through 6.3.15","affected_versions_present":true,"cve_id":"CVE-2021-41017","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-41017","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-10-25T13:38:15.774Z","patch_url":"https://fortiguard.com/advisory/FG-IR-21-160","primary_source":"","published":"2021-12-08T18:51:10.000Z"},{"affected":"FortiWeb 6.4.1, 6.4.0, 6.3.0 through 6.3.15, 6.2.0 through 6.2.6, 6.1.0 through 6.1.2, 6.0.0 thorugh 6.0.7","affected_versions_present":true,"cve_id":"CVE-2021-41025","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-41025","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-10-25T13:38:26.805Z","patch_url":"https://fortiguard.com/advisory/FG-IR-21-130","primary_source":"","published":"2021-12-08T18:46:00.000Z"},{"affected":"FortiWeb 6.4.1, 6.4.0, 6.3.0 through 6.3.15, 6.2.0 through 6.2.6, 6.1.0 through 6.1.2","affected_versions_present":true,"cve_id":"CVE-2021-36195","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-36195","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-10-25T13:38:48.813Z","patch_url":"https://fortiguard.com/advisory/FG-IR-21-157","primary_source":"","published":"2021-12-08T18:14:55.000Z"},{"affected":"FortiWeb 6.4.1, 6.4.0, 6.3.15, 6.3.14, 6.3.13, 6.3.12, 6.3.11, 6.3.10, 6.3.9, 6.3.8, 6.3.7, 6.3.6, 6.3.5, 6.3.4, 6.3.3, 6.3.2, 6.3.1, 6.3.0","affected_versions_present":true,"cve_id":"CVE-2021-41013","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-41013","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-10-25T13:39:22.915Z","patch_url":"https://fortiguard.com/advisory/FG-IR-21-138","primary_source":"","published":"2021-12-08T13:33:58.000Z"},{"affected":"FortiWeb 6.4.1, 6.4.0, 6.3.15, 6.3.14, 6.3.13, 6.3.12, 6.3.11, 6.3.10, 6.3.9, 6.3.8, 6.3.7, 6.3.6, 6.3.5, 6.3.4, 6.3.3, 6.3.2, 6.3.1, 6.3.0, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.1.2, 6.1.1, 6.1.0, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0","affected_versions_present":true,"cve_id":"CVE-2021-36188","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-36188","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-10-24T18:26:55.304Z","patch_url":"","primary_source":"","published":"2021-12-08T13:24:55.000Z"},{"affected":"FortiWeb 6.4.1, 6.4.0, 6.3.15, 6.3.14, 6.3.13, 6.3.12, 6.3.11, 6.3.10, 6.3.9, 6.3.8, 6.3.7, 6.3.6, 6.3.5, 6.3.4, 6.3.3, 6.3.2, 6.3.1, 6.3.0, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0","affected_versions_present":true,"cve_id":"CVE-2021-43063","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-43063","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-10-25T13:39:33.081Z","patch_url":"https://fortiguard.com/advisory/FG-IR-21-122","primary_source":"","published":"2021-12-08T13:16:29.000Z"},{"affected":"FortiWeb 6.4.1, 6.4.0, 6.3.15, 6.3.14, 6.3.13, 6.3.12, 6.3.11, 6.3.10, 6.3.9, 6.3.8, 6.3.7, 6.3.6, 6.3.5, 6.3.4, 6.3.3, 6.3.2, 6.3.1, 6.3.0, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.1.2, 6.1.1, 6.1.0, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0","affected_versions_present":true,"cve_id":"CVE-2021-36190","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-36190","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-10-25T13:39:43.483Z","patch_url":"https://fortiguard.com/advisory/FG-IR-21-123","primary_source":"","published":"2021-12-08T13:11:05.000Z"},{"affected":"FortiWeb 6.4.1, 6.4.0, 6.3.15, 6.3.14, 6.3.13, 6.3.12, 6.3.11, 6.3.10, 6.3.9, 6.3.8, 6.3.7, 6.3.6, 6.3.5, 6.3.4, 6.3.3, 6.3.2, 6.3.1, 6.3.0, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.1.2, 6.1.1, 6.1.0, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0","affected_versions_present":true,"cve_id":"CVE-2021-41014","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-41014","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-10-25T13:39:55.287Z","patch_url":"https://fortiguard.com/advisory/FG-IR-21-131","primary_source":"","published":"2021-12-08T13:06:15.000Z"},{"affected":"FortiWeb 6.4.1, 6.4.0, 6.3.15, 6.3.14, 6.3.13, 6.3.12, 6.3.11, 6.3.10, 6.3.9, 6.3.8, 6.3.7, 6.3.6, 6.3.5, 6.3.4, 6.3.3, 6.3.2, 6.3.1, 6.3.0, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.1.2, 6.1.1, 6.1.0, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0","affected_versions_present":true,"cve_id":"CVE-2021-36191","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-36191","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-10-25T13:40:05.947Z","patch_url":"https://fortiguard.com/advisory/FG-IR-21-133","primary_source":"","published":"2021-12-08T13:03:35.000Z"},{"affected":"FortiWeb 6.4.1, 6.4.0","affected_versions_present":true,"cve_id":"CVE-2021-41027","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-41027","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-10-25T13:40:17.517Z","patch_url":"https://fortiguard.com/advisory/FG-IR-21-134","primary_source":"","published":"2021-12-08T12:55:42.000Z"},{"affected":"FortiWeb 6.4.1, 6.4.0","affected_versions_present":true,"cve_id":"CVE-2021-41015","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-41015","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-10-25T13:40:28.039Z","patch_url":"https://fortiguard.com/advisory/FG-IR-21-139","primary_source":"","published":"2021-12-08T12:39:00.000Z"},{"affected":"FortiWeb 6.4.1, 6.4.0, 6.3.15, 6.3.14, 6.3.13, 6.3.12, 6.3.11, 6.3.10, 6.3.9, 6.3.8, 6.3.7, 6.3.6, 6.3.5, 6.3.4, 6.3.3, 6.3.2, 6.3.1, 6.3.0, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0","affected_versions_present":true,"cve_id":"CVE-2021-43064","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-43064","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-10-25T13:40:38.183Z","patch_url":"https://fortiguard.com/advisory/FG-IR-21-168","primary_source":"","published":"2021-12-08T12:33:18.000Z"},{"affected":"FortiWeb 6.4.1 and below, 6.3.15 and below, 6.2.5 and below","affected_versions_present":true,"cve_id":"CVE-2021-36180","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-36180","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-10-25T13:42:36.173Z","patch_url":"https://fortiguard.com/advisory/FG-IR-21-120","primary_source":"","published":"2021-12-08T10:46:45.000Z"},{"affected":"FortiWeb 6.4.0, 6.3.15, 6.3.14, 6.3.13, 6.3.12, 6.3.11, 6.3.10, 6.3.9, 6.3.8, 6.3.7, 6.3.6, 6.3.5, 6.3.4, 6.3.3, 6.3.2, 6.3.1, 6.3.0, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0","affected_versions_present":true,"cve_id":"CVE-2021-36186","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-36186","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-10-25T13:44:51.405Z","patch_url":"","primary_source":"","published":"2021-11-02T18:35:58.000Z"},{"affected":"FortiWeb 6.4.0, 6.3.15, 6.3.14, 6.3.13, 6.3.12, 6.3.11, 6.3.10, 6.3.9, 6.3.8, 6.3.7, 6.3.6, 6.3.5, 6.3.4, 6.3.3, 6.3.2, 6.3.1, 6.3.0, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.1.2, 6.1.1, 6.1.0, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0, 5.9.1, 5.9.0, 5.8.7, 5.8.6, 5.8.5, 5.8.3, 5.8.2, 5.8.1, 5.8.0, 5.7.3, 5.7.2, 5.7.1, 5.7.0, 5.6.2, 5.6.1, 5.6.0, 5.5.7, 5.5.6, 5.5.5, 5.5.4, 5.5.3, 5.5.2, 5.5.1, 5.5.0, 5.4.1, 5.4.0, 5.3.9, 5.3.8, 5.3.7, 5.3.6, 5.3.5, 5.3.4, 5.3.3, 5.3.2, 5.3.1, 5.3.0, 5.2.4, 5.2.3, 5.2.2, 5.2.1, 5.2.0, 5.1.4, 5.1.3, 5.1.2, 5.1.1, 5.1.0, 5.0.6, 5.0.5, 5.0.4, 5.0.3, 5.0.2, 5.0.1, 5.0.0, 4.4.7, 4.4.6, 4.4.5, 4.4.4, 4.4.3, 4.4.2, 4.4.1, 4.4.0, 4.3.7, 4.3.6, 4.3.5, 4.3.4, 4.3.3, 4.3.2, 4.3.1, 4.2.4, 4.2.3, 4.2.2, 4.2.0, 4.1.2, 4.1.1, 4.1.0, 4.0.2, 3.0.0","affected_versions_present":true,"cve_id":"CVE-2021-36187","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-36187","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-10-25T13:45:24.571Z","patch_url":"","primary_source":"","published":"2021-11-02T18:32:37.000Z"},{"affected":"FortiWeb 6.3.13, 6.3.12, 6.3.11, 6.3.10, 6.3.9, 6.3.8, 6.3.7, 6.3.6, 6.3.5, 6.3.4, 6.3.3, 6.3.2, 6.3.1, 6.3.0","affected_versions_present":true,"cve_id":"CVE-2021-36182","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-36182","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-10-25T13:50:22.365Z","patch_url":"","primary_source":"","published":"2021-09-08T10:20:57.000Z"},{"affected":"FortiWeb 6.3.14, 6.3.13, 6.3.12, 6.3.11, 6.3.10, 6.3.9, 6.3.8, 6.3.7, 6.3.6, 6.3.5, 6.3.4, 6.3.3, 6.3.2, 6.3.1, 6.3.0, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0","affected_versions_present":true,"cve_id":"CVE-2021-36179","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-36179","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-10-25T13:50:33.122Z","patch_url":"","primary_source":"","published":"2021-09-08T10:15:48.000Z"},{"affected":"FortiWeb 6.3.7 and below, 6.2.3 and below, 6.1.x, 6.0.x, 5.9.x","affected_versions_present":true,"cve_id":"CVE-2021-22123","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-22123","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-10-25T13:58:34.151Z","patch_url":"","primary_source":"","published":"2021-06-01T19:58:35.000Z"},{"affected":"FortiWeb 6.3.4, 6.2.3","affected_versions_present":true,"cve_id":"CVE-2020-15942","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-15942","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-10-25T13:59:32.498Z","patch_url":"","primary_source":"","published":"2021-04-12T14:11:25.000Z"},{"affected":"FortiWeb 6.3.0 through 6.3.7 and version before 6.2.4","affected_versions_present":true,"cve_id":"CVE-2021-22122","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-22122","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-10-25T14:00:24.537Z","patch_url":"","primary_source":"","published":"2021-02-08T15:55:39.000Z"},{"affected":"FortiWeb 6.3.0 through 6.3.5","affected_versions_present":true,"cve_id":"CVE-2020-29018","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-29018","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-10-25T14:23:23.372Z","patch_url":"","primary_source":"","published":"2021-01-14T16:06:03.000Z"},{"affected":"FortiWeb 6.3.0 through 6.3.5 and version before 6.2.4","affected_versions_present":true,"cve_id":"CVE-2020-29016","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-29016","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-10-25T14:23:38.299Z","patch_url":"","primary_source":"","published":"2021-01-14T16:04:45.000Z"},{"affected":"6.2.0 and earlier","affected_versions_present":true,"cve_id":"CVE-2019-16157","cve_url":"https://cve.blacktree.nl/cve/CVE-2019-16157","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-10-25T14:02:54.064Z","patch_url":"","primary_source":"","published":"2020-03-13T15:02:45.000Z"},{"affected":"6.0.5; 6.2.0; 6.1.1","affected_versions_present":true,"cve_id":"CVE-2019-16156","cve_url":"https://cve.blacktree.nl/cve/CVE-2019-16156","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-10-25T14:03:17.298Z","patch_url":"","primary_source":"","published":"2020-03-12T21:15:34.000Z"},{"affected":"FortiWeb 5.8.0, 5.7.1 and earlier","affected_versions_present":true,"cve_id":"CVE-2017-7736","cve_url":"https://cve.blacktree.nl/cve/CVE-2017-7736","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-10-25T14:10:30.990Z","patch_url":"","primary_source":"","published":"2017-11-22T17:00:00.000Z"},{"affected":"FortiWeb 5.8.2 and below versions.","affected_versions_present":true,"cve_id":"CVE-2017-7737","cve_url":"https://cve.blacktree.nl/cve/CVE-2017-7737","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-10-25T14:13:01.451Z","patch_url":"","primary_source":"","published":"2017-08-10T21:00:00.000Z"},{"affected":"FortiWeb versions 5.7.1 and below","affected_versions_present":true,"cve_id":"CVE-2017-3129","cve_url":"https://cve.blacktree.nl/cve/CVE-2017-3129","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-10-25T14:13:52.020Z","patch_url":"","primary_source":"","published":"2017-05-26T22:00:00.000Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"Fortinet, Inc."}}