Aller au contenu
en Se connecter
5.4 Moyenne

CVE-2022-26120 Multiple improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerabilities [CWE-89]…

Description

Multiple improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerabilities [CWE-89] in FortiADC management interface 7.0.0 through 7.0.1, 5.0.0 through 6.2.2 may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.

Produits et versions touchés

Produit Versions touchées Corrigé en
Fortinet FortiADC Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Fortinet FortiADC

Les 7 CVE de Fortinet FortiADC →
CVE-2022-35851 An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiADC management interface… 8.0 Élevée CVE-2022-38381 An improper handling of malformed request vulnerability [CWE-228] exists in FortiADC 5.0 all versions, 6.0.0 all… 5.3 Moyenne CVE-2022-38374 A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiADC 7.0.0 -… 8.8 Élevée CVE-2022-27484 A unverified password change in Fortinet FortiADC version 6.2.0 through 6.2.3, 6.1.x, 6.0.x, 5.x.x allows an… 5.4 Moyenne
Suivre cette CVE