6.3
Moyenne
CVE-2023-47542 A improper neutralization of special elements used in a template engine [CWE-1336] in FortiManager versions 7.4.1 and…
Description
A improper neutralization of special elements used in a template engine [CWE-1336] in FortiManager versions 7.4.1 and below, versions 7.2.4 and below, and 7.0.10 and below allows attacker to execute unauthorized code or commands via specially crafted templates.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| FortiManager 7.4 | 7.4.0 → 7.4.1 | Pas de correctif indiqué |
| FortiManager 7.2 | 7.2.0 → 7.2.4 | Pas de correctif indiqué |
| FortiManager 7.0 | 7.0.0 → 7.0.10 | Pas de correctif indiqué |
Autres CVE de FortiManager
Les 88 CVE de FortiManager →
CVE-2026-23707
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89]…
6.5
Moyenne
CVE-2026-23706
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89]…
5.9
Moyenne
CVE-2026-23705
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89]…
6.5
Moyenne
CVE-2026-106171
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet…
5.3
Moyenne