VDB
CVE-2023-34990
CVE-2023-34990
PUBLISHED
CVSS 7.199999809265137 HIGH
A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specially crafted web requests.
EPSS 72.87% · 98.8th percentile
Risk Scores
CVSS v3.1
7.199999809265137
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:H/RL:U/RC:X
EPSS Score
72.87%
98.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fortinet | FortiWLM | |
| Fortinet | FortiManager | 7.2.3, 7.6.0, 7.4.0 |
| Fortinet | FortiClient | |
| fortinet | fortiwlm | 8.5.0, 8.6.0, 8.5.0 |
Timeline
- Dec 18, 2024 CVE Published
- Dec 18, 2024 PoC Published
- Dec 18, 2024 PoC Published
- Dec 19, 2024 EPSS Score
- Dec 19, 2024 PoC Published
- Dec 20, 2024 CVE Updated
- Jun 4, 2025 Nuclei Template
- Jun 4, 2025 Fix Commit
- Jun 9, 2025 EPSS Score
- Jun 15, 2025 EPSS Score
- Jun 19, 2025 EPSS Score
- Jun 25, 2025 EPSS Score
References
- https://www.fortiguard.com/psirt/FG-IR-24-425 advisory
- https://www.fortiguard.com/psirt/FG-IR-23-278 advisory
- https://www.fortiguard.com/psirt/FG-IR-23-144 advisory
- https://fortiguard.fortinet.com/psirt/FG-IR-24-425 url
- https://fortiguard.com/psirt/FG-IR-23-144 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-34990 advisory