Skip to content
Sign in
3.7 Low

CVE-2024-52969 An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in…

Description

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiSIEM ersion 7.1.7 and below, version 7.1.0, version 7.0.3 and below, version 6.7.9 and below, 6.7.8, version 6.6.5 and below, version 6.5.3 and below, version 6.4.4 and below Update/Create Case feature may allow an authenticated attacker to extract database information via crafted requests.

Affected products and versions

Product Affected versions Fixed in
FortiSIEM 7.1 7.1.0 → 7.1.7 No fix stated
FortiSIEM 7.0 7.0.0 → 7.0.3 No fix stated
FortiSIEM 6.7 6.7.0 → 6.7.9 No fix stated
FortiSIEM 6.6 6.6.0 → 6.6.5 No fix stated
FortiSIEM 6.5 6.5.0 → 6.5.3 No fix stated
FortiSIEM 6.4 6.4.0 → 6.4.4 No fix stated

Other CVEs of FortiSIEM

The 26 CVEs of FortiSIEM →
CVE-2026-106173 A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM… 9.4 Critical CVE-2026-106176 A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or… 3.4 Low CVE-2026-84389 A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM… 2.8 Low CVE-2026-70467 A server-side request forgery (ssrf) vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4.0 through 7.4.2, FortiSIEM… 3.4 Low
Track this CVE