AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2020-29015

CRITICAL · CVSS 9.8 EPSS 2.57%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-01-14 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2020-29015
Severity
CRITICAL
CVSS
9.8
EPSS
2.57%

Original NVD Description

A blind SQL injection in the user interface of FortiWeb 6.3.0 through 6.3.7 and version before 6.2.4 may allow an unauthenticated, remote attacker to execute arbitrary SQL queries or commands by sending a request with a crafted Authorization header containing a malicious SQL statement.