Skip to main content
dazzer
dazzer
Visitor III
December 4, 2025
Question

AWS Fortinet OWASP Top 10 - The Complete Ruleset

  • December 4, 2025
  • 1 reply
  • 764 views

We have subscriptions to this service in AWS.  How can I check the current CVEs applied to this rule group?

1 reply

xshkurti
Staff
xshkurti
Staff
December 4, 2025

@dazzer ,
According to this link: AWS Marketplace: Fortinet Managed Rules for AWS WAF - Complete OWASP Top 10
Fortinets WAF rulesets are based on the FortiWeb web application firewall security service signatures, and are updated on a regular basis to include the latest threat information from FortiGuard Labs. The Complete OWASP Top 10 Ruleset provides a comprehensive package for web application protection offered by Fortinet to help cover the entire list of OWASP Top 10 web application threats. Includes protection for SQL Injection, Cross Site Scripting, General and Known Exploits, Malicious Bots and Common Vulnerabilities and Exposures (CVE).
Which means that there is not a single CVE to rule ID to match.
To find out what CVEs are currently included, you may need to open a ticket with the Fortinet team.

regards

    Terms & ConditionsAccessibility statement