6.9
Medium
CVE-2023-41838 An improper neutralization of special elements used in an os command ('os command injection') in FortiManager 7.4.0…
Description
An improper neutralization of special elements used in an os command ('os command injection') in FortiManager 7.4.0 and 7.2.0 through 7.2.3 may allow attacker to execute unauthorized code or commands via FortiManager cli.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiAnalyzer | 7.4.0 | No fix stated |
| FortiAnalyzer 7.2 | 7.2.0 → 7.2.3 | No fix stated |
| FortiAnalyzer 7.0 | 7.0.0 → 7.0.8 | No fix stated |
| FortiAnalyzer 6.4 | 6.4.0 → 6.4.12 | No fix stated |
| FortiAnalyzer 6.2 | 6.2.0 → 6.2.11 | No fix stated |
| FortiManager | 7.4.0 | No fix stated |
| FortiManager 7.2 | 7.2.0 → 7.2.3 | No fix stated |
| FortiManager 7.0 | 7.0.0 → 7.0.8 | No fix stated |
| FortiManager 6.4 | 6.4.0 → 6.4.12 | No fix stated |
Show the other branch Hide the other branch
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiManager 6.2 | 6.2.0 → 6.2.11 | No fix stated |
References
- fortiguard.com fortiguard.com
Timeline
- Published
- Last modified
Other CVEs of FortiAnalyzer
The 74 CVEs of FortiAnalyzer →
CVE-2026-23706
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89]…
5.9
Medium
CVE-2026-23707
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89]…
6.5
Medium
CVE-2026-23705
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89]…
6.5
Medium
CVE-2025-46773
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89]…
7.9
High