Aller au contenu
en Se connecter
5.9 Moyenne

CVE-2023-23775 Multiple improper neutralization of special elements used in SQL commands ('SQL Injection') vulnerabilities [CWE-89]…

Description

Multiple improper neutralization of special elements used in SQL commands ('SQL Injection') vulnerabilities [CWE-89] in FortiSOAR 7.2.0 and before 7.0.3 may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted strings parameters.

Produits et versions touchés

Produit Versions touchées Corrigé en
FortiSOAR 7.2.0 Pas de correctif indiqué
FortiSOAR 7.0 7.0.0 → 7.0.3 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de FortiSOAR

Les 15 CVE de FortiSOAR →
CVE-2024-48892 A relative path traversal vulnerability [CWE-23] in FortiSOAR 7.6.0, 7.5.0 through 7.5.1, 7.4 all versions, 7.3 all… 6.4 Moyenne CVE-2025-32932 An Improper neutralization of input during web page generation ('cross-site scripting') vulnerability [CWE-79] in… 6.2 Moyenne CVE-2024-21760 An improper control of generation of code ('Code Injection') vulnerability [CWE-94] in FortiSOAR Connector FortiSOAR 7.4… 7.7 Élevée CVE-2022-23439 A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison… 4.1 Moyenne
Suivre cette CVE