Skip to content
fr Sign in
8.6 High

CVE-2023-37931 An improper neutralization of special elements used in an sql command ('sql injection') vulnerability [CWE-88] in…

Description

An improper neutralization of special elements used in an sql command ('sql injection') vulnerability [CWE-88] in FortiVoice Entreprise version 7.0.0 through 7.0.1 and before 6.4.8 allows an authenticated attacker to perform a blind sql injection attack via sending crafted HTTP or HTTPS requests

Affected products and versions

Product Affected versions Fixed in
FortiVoice 7.0 7.0.0 → 7.0.1 No fix stated
FortiVoice 6.4 6.4.0 → 6.4.8 No fix stated
FortiVoice 6.0 6.0.0 → 6.0.12 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of FortiVoice

The 20 CVEs of FortiVoice →
CVE-2024-23104 An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiNDR 7.6.0, FortiNDR 7.4.0… 5.4 Medium CVE-2025-55717 A cleartext storage of sensitive information vulnerability [CWE-312] vulnerability in Fortinet FortiMail 7.6.0 through… 3.8 Low CVE-2025-58693 An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiVoice… 5.7 Medium CVE-2025-64156 An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet… 6.8 Medium
Track this CVE