7.4
High
CVE-2022-27482 A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiADC…
Description
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiADC version 7.0.0 through 7.0.1, 6.2.0 through 6.2.2, 6.1.0 through 6.1.6, 6.0.x, 5.x.x allows attacker to execute arbitrary shell code as `root` via CLI commands.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiADC 7.0 | 7.0.0 → 7.0.2 | No fix stated |
| FortiADC 6.2 | 6.2.0 → 6.2.2 | No fix stated |
| FortiADC 6.1 | 6.1.0 → 6.1.6 | No fix stated |
| FortiADC 6.0 | 6.0.0 → 6.0.4 | No fix stated |
| FortiADC 5.4 | 5.4.0 → 5.4.5 | No fix stated |
| FortiADC 5.3 | 5.3.0 → 5.3.7 | No fix stated |
| FortiADC 5.2 | 5.2.0 → 5.2.8 | No fix stated |
| FortiADC 5.1 | 5.1.0 → 5.1.7 | No fix stated |
| FortiADC 5.0 | 5.0.0 → 5.0.4 | No fix stated |
Other CVEs of FortiADC
The 33 CVEs of FortiADC →
CVE-2025-58412
A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiADC…
4.2
Medium
CVE-2025-48839
An Out-of-bounds Write vulnerability [CWE-787] in FortiADC 8.0.0, 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2 all…
6.3
Medium
CVE-2025-54971
An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiADC 7.4.0, FortiADC 7.2 all…
3.9
Low
CVE-2025-59921
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiADC version…
6.2
Medium