Aller au contenu
en Se connecter
8.6 Élevée

CVE-2023-37931 An improper neutralization of special elements used in an sql command ('sql injection') vulnerability [CWE-88] in…

Description

An improper neutralization of special elements used in an sql command ('sql injection') vulnerability [CWE-88] in FortiVoice Entreprise version 7.0.0 through 7.0.1 and before 6.4.8 allows an authenticated attacker to perform a blind sql injection attack via sending crafted HTTP or HTTPS requests

Produits et versions touchés

Produit Versions touchées Corrigé en
FortiVoice 7.0 7.0.0 → 7.0.1 Pas de correctif indiqué
FortiVoice 6.4 6.4.0 → 6.4.8 Pas de correctif indiqué
FortiVoice 6.0 6.0.0 → 6.0.12 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de FortiVoice

Les 20 CVE de FortiVoice →
CVE-2024-23104 An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiNDR 7.6.0, FortiNDR 7.4.0… 5.4 Moyenne CVE-2025-55717 A cleartext storage of sensitive information vulnerability [CWE-312] vulnerability in Fortinet FortiMail 7.6.0 through… 3.8 Faible CVE-2025-58693 An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiVoice… 5.7 Moyenne CVE-2025-64156 An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet… 6.8 Moyenne
Suivre cette CVE