{"id":"CVE-2021-22123","published":"2021-06-01T19:58:35Z","modified":"2024-10-25T13:58:34Z","title":"An OS command injection vulnerability in FortiWeb's management interface 6.3.7 and below, 6.2.3 and below, 6.1.x…","vendor":"Fortinet","product":"Fortinet FortiWeb","tier":"core","eol":null,"affectedVersions":[{"vendor":"Fortinet","product":"Fortinet FortiWeb","versions":["FortiWeb 6.3.7 and below, 6.2.3 and below, 6.1.x, 6.0.x, 5.9.x"]}],"description":{"text":"An OS command injection vulnerability in FortiWeb's management interface 6.3.7 and below, 6.2.3 and below, 6.1.x, 6.0.x, 5.9.x may allow a remote authenticated attacker to execute arbitrary commands on the system via the SAML server configuration page.","provenance":"source","from":"CVE.org"},"summary":{"text":"An OS command injection flaw in the management interface of Fortinet FortiWeb, specifically via the SAML server configuration page, allows arbitrary command execution on the underlying system. Exploitation requires a remote attacker who is authenticated, with no user interaction needed.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:12:59Z"},"cvss":{"score":7.6,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.84396,"percentile":0.99699,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":1,"pulses":[{"name":"Proof Point Emerging Exploit list","url":"https://otx.alienvault.com/pulse/6399fdc966948f6b537b9762","created":"2022-12-14"}],"provenance":"machine"},"cwes":[],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-120","tags":["x_refsource_CONFIRM"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2021-9279","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-9279","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":1,"skipped":0,"earliest":"2021-08-18","earliestUrl":"https://github.com/murataydemir/CVE-2021-22123","repos":[{"name":"murataydemir/CVE-2021-22123","url":"https://github.com/murataydemir/CVE-2021-22123","stars":6,"created":"2021-08-18"}]},"first":{"date":"2021-08-18","source":"PoC-in-GitHub","url":"https://github.com/murataydemir/CVE-2021-22123"},"provenance":"source"},"detections":{"cveRules":[{"title":"Fortinet CVE-2021-22123 Exploitation","id":"f425637f-891c-4191-a6c4-3bb1b70513b4","level":"critical","status":"test","path":"rules-emerging-threats/2021/Exploits/CVE-2021-22123/web_cve_2021_22123_fortinet_exploit.yml","url":"https://github.com/SigmaHQ/sigma/blob/master/rules-emerging-threats/2021/Exploits/CVE-2021-22123/web_cve_2021_22123_fortinet_exploit.yml","techniques":["T1190"]}]},"exploitRefs":[],"flow":[],"timeline":[{"date":"2021-06-01","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2021-22123","provenance":"source"},{"date":"2021-08-18","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub","url":"https://github.com/murataydemir/CVE-2021-22123","provenance":"source"}],"speed":{"daysToPublicExploit":78,"firstExploitFrom":"PoC-in-GitHub","daysToKev":null},"priority":{"score":30.9,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.94,"detail":"percentile 0.9970"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 PoC-in-GitHub repo"},{"name":"Mentioned in OTX pulses","points":0.68,"detail":"1 pulse"},{"name":"CVSS severity","points":5.32,"detail":"base score 7.6"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}