Class familyFortinet · FortiWeb
Fortinet FortiWeb path traversal flaws, 2023–2026
7 FortiWeb CVEs with CWE-23 weaknesses, 16 Feb 2023 to 14 Apr 2026. 1 is in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
4 2023’23
2024’24
2 2025’25
1 2026’26
In CISA KEVNot in KEV
20234 CVEs
20252 CVEs, 1 in KEV
20261 CVE
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2022-30299 | 16 Feb 2023 | A path traversal vulnerability [CWE-23] in the API of FortiWeb 7.0.0 through 7.0.1, 6.3.0 through 6.3.19, 6.4 all… | Grouped by weakness | 11.7 |
| CVE-2022-30300 | 16 Feb 2023 | A relative path traversal vulnerability [CWE-23] in FortiWeb 7.0.0 through 7.0.1, 6.3.6 through 6.3.18, 6.4 all… | Grouped by weakness | 15.7 |
| CVE-2023-23778 | 16 Feb 2023 | A relative path traversal vulnerability [CWE-23] in FortiWeb version 7.0.1 and below, 6.4 all versions, 6.3 all… | Grouped by weakness | 12.8 |
| CVE-2023-23784 | 16 Feb 2023 | A relative path traversal in Fortinet FortiWeb version 7.0.0 through 7.0.2, FortiWeb version 6.3.6 through 6.3.20… | Grouped by weakness | 13.2 |
| CVE-2025-53609 | 9 Sep 2025 | A Relative Path Traversal vulnerability [CWE-23] in FortiWeb 7.6.0 through 7.6.4, 7.4.0 through 7.4.8, 7.2.0 through… | Grouped by weakness | 22.4 |
| CVE-2025-64446KEV | 14 Nov 2025 | Fortinet FortiWeb Path Traversal Vulnerability | Grouped by weakness | 79.8 |
| CVE-2026-39814 | 14 Apr 2026 | Multiple Relative Path Traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2… | Grouped by weakness | 4.9 |