Skip to content
Sign in
9.3 Critical

CVE-2023-34991 A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version…

Description

A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 and 8.4.0 through 8.4.2 and 8.3.0 through 8.3.2 and 8.2.2 allows attacker to execute unauthorized code or commands via a crafted http request.

Affected products and versions

Product Affected versions Fixed in
FortiWLM 8.6 8.6.0 → 8.6.5 No fix stated
FortiWLM 8.5 8.5.0 → 8.5.4 No fix stated
FortiWLM 8.4 8.4.0 → 8.4.2 No fix stated
FortiWLM 8.3 8.3.0 → 8.3.2 No fix stated
FortiWLM 8.2.2 No fix stated

Other CVEs of FortiWLM

The 14 CVEs of FortiWLM →
CVE-2023-34990 A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to… 9.6 Critical CVE-2023-48782 A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM… 8.6 High CVE-2023-42783 A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 and 8.4.2 through… 7.3 High CVE-2023-36548 A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM… 9.6 Critical
Track this CVE