7.7
Élevée
CVE-2024-21760 An improper control of generation of code ('Code Injection') vulnerability [CWE-94] in FortiSOAR Connector FortiSOAR 7.4…
Description
An improper control of generation of code ('Code Injection') vulnerability [CWE-94] in FortiSOAR Connector FortiSOAR 7.4 all versions, 7.3 all versions, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an authenticated attacker to execute arbitrary code on the host via a playbook code snippet.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| FortiSOAR 7.4 | 7.4.0 → 7.4.5 | Pas de correctif indiqué |
| FortiSOAR 7.3 | 7.3.0 → 7.3.3 | Pas de correctif indiqué |
| FortiSOAR 7.2 | 7.2.0 → 7.2.2 | Pas de correctif indiqué |
| FortiSOAR 7.0 | 7.0.0 → 7.0.3 | Pas de correctif indiqué |
| FortiSOAR 6.4 | 6.4.0 → 6.4.4 | Pas de correctif indiqué |
Autres CVE de FortiSOAR
Les 15 CVE de FortiSOAR →
CVE-2024-48892
A relative path traversal vulnerability [CWE-23] in FortiSOAR 7.6.0, 7.5.0 through 7.5.1, 7.4 all versions, 7.3 all…
6.4
Moyenne
CVE-2025-32932
An Improper neutralization of input during web page generation ('cross-site scripting') vulnerability [CWE-79] in…
6.2
Moyenne
CVE-2022-23439
A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison…
4.1
Moyenne
CVE-2024-47572
An improper neutralization of formula elements in a csv file in Fortinet FortiSOAR 7.2.1 through 7.4.1 allows attacker…
8.3
Élevée