FortiWeb 5.6
Fortinet, Inc. - FIPS 140 #3103
The FortiWeb OS is a firmware operating system that runs exclusively on Fortinet's FortiWeb product family. FortiWeb units are PC-based, purpose built appliances.
Key facts
- Scheme
- FIPS 140
- Certificate
- 3103
- Standard
- FIPS 140-2
- Security level
- Level 1
- Status
- historical
- Vendor
- Fortinet, Inc.
- Module type
- Firmware
- Embodiment
- Multi-Chip Stand Alone
- Lab
- CGI Information Systems & Management Consultants Inc
- First validated
- January 5, 2018
- Versions
- v5.6.0, build 6180,170928
- Caveat
- When operated in FIPS mode and configured according to the Entropy Token Section of the Security Policy. There is no assurance of the minimum strength of generated keys
Algorithms
- AES
- CVL
- DRBG
- HMAC
- KTS
- RSA
- SHS
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
CVEs that may affect this product
- CVE-2021-42756CRITICAL 9.8EPSS 35.0%
- CVE-2020-29016CRITICAL 9.8EPSS 3.4%
- CVE-2020-29015CRITICAL 9.8EPSS 2.6%
- CVE-2021-42761CRITICAL 9.0EPSS 1.5%
- CVE-2021-36182HIGH 8.8EPSS 1.9%
- CVE-2021-36179HIGH 8.0EPSS 1.6%
- CVE-2023-25602HIGH 7.8EPSS 0.2%
- CVE-2021-42757MEDIUM 6.7EPSS 0.5%
- CVE-2021-36193MEDIUM 6.7EPSS 0.8%
- CVE-2019-16157MEDIUM 6.5EPSS 0.9%
- CVE-2021-22122MEDIUM 6.1EPSS 10.5%
- CVE-2019-5590MEDIUM 6.1EPSS 1.0%
- CVE-2017-3129MEDIUM 6.1EPSS 0.7%
- CVE-2017-14191MEDIUM 5.9EPSS 1.0%
- CVE-2020-6646MEDIUM 5.4EPSS 0.8%
- CVE-2017-7736MEDIUM 5.4EPSS 0.3%
- CVE-2020-29019MEDIUM 5.3EPSS 2.1%
- CVE-2017-7737MEDIUM 4.9EPSS 1.1%
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 21, 2026 - synced October 15, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain