Aller au contenu
en Se connecter
7.2 Élevée

CVE-2022-26116 Multiple improper neutralization of special elements used in SQL commands ('SQL Injection') vulnerability [CWE-89] in…

Description

Multiple improper neutralization of special elements used in SQL commands ('SQL Injection') vulnerability [CWE-89] in FortiNAC version 8.3.7 and below, 8.5.2 and below, 8.5.4, 8.6.0, 8.6.5 and below, 8.7.6 and below, 8.8.11 and below, 9.1.5 and below, 9.2.2 and below may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted strings parameters.

Produits et versions touchés

Produit Versions touchées Corrigé en
Fortinet FortiNAC Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Fortinet FortiNAC

Les 6 CVE de Fortinet FortiNAC →
CVE-2022-26117 An empty password in configuration file vulnerability [CWE-258] in FortiNAC version 8.3.7 and below, 8.5.2 and below,… 8.8 Élevée CVE-2021-43065 A incorrect permission assignment for critical resource in Fortinet FortiNAC version 9.2.0, version 9.1.3 and below,… 7.8 Élevée CVE-2021-41021 A privilege escalation vulnerability in FortiNAC versions 8.8.8 and below and 9.1.2 and below may allow an admin user to… 7.8 Élevée CVE-2021-24011 A privilege escalation vulnerability in FortiNAC version below 8.8.2 may allow an admin user to escalate the… 6.3 Moyenne
Suivre cette CVE