Skip to content
fr Sign in
5.4 Medium

CVE-2022-26120 Multiple improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerabilities [CWE-89]…

Description

Multiple improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerabilities [CWE-89] in FortiADC management interface 7.0.0 through 7.0.1, 5.0.0 through 6.2.2 may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.

Affected products and versions

Product Affected versions Fixed in
Fortinet FortiADC Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Fortinet FortiADC

The 7 CVEs of Fortinet FortiADC →
CVE-2022-35851 An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiADC management interface… 8.0 High CVE-2022-38381 An improper handling of malformed request vulnerability [CWE-228] exists in FortiADC 5.0 all versions, 6.0.0 all… 5.3 Medium CVE-2022-38374 A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiADC 7.0.0 -… 8.8 High CVE-2022-27484 A unverified password change in Fortinet FortiADC version 6.2.0 through 6.2.3, 6.1.x, 6.0.x, 5.x.x allows an… 5.4 Medium
Track this CVE