Skip to content
fr Sign in
7.0 High

CVE-2025-31104 A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet…

Description

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiADC 7.6.0 through 7.6.1, FortiADC 7.4.0 through 7.4.6, FortiADC 7.2.0 through 7.2.7, FortiADC 7.1.0 through 7.1.4, FortiADC 7.0 all versions, FortiADC 6.2 all versions, FortiADC 6.1 all versions, FortiADC 6.0 all versions, FortiADC 5.4 all versions, FortiADC 5.3 all versions, FortiADC 5.2 all versions, FortiADC 5.1 all versions, FortiADC 5.0 all versions, FortiADC 4.8 all versions, FortiADC 4.7 all versions, FortiADC 4.6 all versions, FortiADC 4.5 all versions, FortiADC 4.4 all versions, FortiADC 4.3 all versions, FortiADC 4.2 all versions, FortiADC 4.1 all versions, FortiADC 4.0 all versions, FortiADC 3.2 all versions, FortiADC 3.1 all versions, FortiADC 3.0 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>

Affected products and versions

Product Affected versions Fixed in
FortiADC 7.6 7.6.0 → 7.6.1 No fix stated
FortiADC 7.4 7.4.0 → 7.4.6 No fix stated
FortiADC 7.2 7.2.0 → 7.2.7 No fix stated
FortiADC 7.1 7.1.0 → 7.1.4 No fix stated
FortiADC 7.0 7.0.0 → 7.0.6 No fix stated
FortiADC 6.2 6.2.0 → 6.2.6 No fix stated
FortiADC 6.1 6.1.0 → 6.1.6 No fix stated
FortiADC 6.0 6.0.0 → 6.0.4 No fix stated
FortiADC 5.4 5.4.0 → 5.4.5 No fix stated
Show the 16 other branches
Product Affected versions Fixed in
FortiADC 5.3 5.3.0 → 5.3.7 No fix stated
FortiADC 5.2 5.2.0 → 5.2.8 No fix stated
FortiADC 5.1 5.1.0 → 5.1.7 No fix stated
FortiADC 5.0 5.0.0 → 5.0.4 No fix stated
FortiADC 4.8 4.8.0 → 4.8.8 No fix stated
FortiADC 4.7 4.7.0 → 4.7.3 No fix stated
FortiADC 4.6 4.6.0 → 4.6.2 No fix stated
FortiADC 4.5 4.5.0 → 4.5.4 No fix stated
FortiADC 4.4 4.4.0 → 4.4.1 No fix stated
FortiADC 4.3 4.3.0 → 4.3.2 No fix stated
FortiADC 4.2 4.2.0 → 4.2.3 No fix stated
FortiADC 4.1 4.1.0 → 4.1.1 No fix stated
FortiADC 4.0 4.0.0 → 4.0.2 No fix stated
FortiADC 3.2 3.2.0 → 3.2.2 No fix stated
FortiADC 3.1.0 No fix stated
FortiADC 3.0.0 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of FortiADC

The 33 CVEs of FortiADC →
CVE-2025-58412 A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiADC… 4.2 Medium CVE-2025-48839 An Out-of-bounds Write vulnerability [CWE-787] in FortiADC 8.0.0, 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2 all… 6.3 Medium CVE-2025-54971 An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiADC 7.4.0, FortiADC 7.2 all… 3.9 Low CVE-2025-59921 An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiADC version… 6.2 Medium
Track this CVE