Skip to content
Sign in
8.6 High

CVE-2023-34986 A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM…

Description

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted HTTP get request parameters.

Affected products and versions

Product Affected versions Fixed in
FortiWLM 8.6 8.6.0 → 8.6.5 No fix stated
FortiWLM 8.5 8.5.0 → 8.5.4 No fix stated

Other CVEs of FortiWLM

The 14 CVEs of FortiWLM →
CVE-2023-34990 A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to… 9.6 Critical CVE-2023-48782 A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM… 8.6 High CVE-2023-34991 A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version… 9.3 Critical CVE-2023-42783 A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 and 8.4.2 through… 7.3 High
Track this CVE